Out of Bounds Memory Vulnerability in Symantec Endpoint Protection Manager
CVE-2020-5829

3.3LOW

Key Information:

Vendor
Symantec
Status
Symantec Endpoint Protection Manager (sepm)
Vendor
CVE Published:
11 February 2020

Summary

The vulnerability allows unauthorized access to memory that falls outside the allocated bounds for the Symantec Endpoint Protection Manager. This issue may lead to potential information disclosure and could enable attackers to exploit system weaknesses if left unpatched. Proper updates and security measures should be employed to mitigate the risks associated with this vulnerability as outlined by the vendor.

Affected Version(s)

Symantec Endpoint Protection Manager (SEPM) Prior to 14.2 RU2 MP1

References

https://support.symantec.com/us/en/article.SYMSA1505.html
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.