Directory Traversal Vulnerability in Symantec Endpoint Protection Manager
CVE-2020-5834

5.3MEDIUM

Key Information:

Vendor
Symantec
Status
Symantec Endpoint Protection Manager
Vendor
CVE Published:
11 May 2020

Summary

A directory traversal vulnerability exists in Symantec Endpoint Protection Manager, allowing remote actors to exploit this weakness. By manipulating directory paths, an attacker could potentially gain knowledge about file sizes within the directory structure, leading to unauthorized access to sensitive information. This issue specifically affects versions prior to 14.3, emphasizing the need for users to ensure their systems are up-to-date to mitigate risks associated with this exposure.

Affected Version(s)

Symantec Endpoint Protection Manager Prior to 14.3

References

https://support.broadcom.com/security-advisory/security-a...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.