PT-2015-5325 · Symantec · Symantec Endpoint Protection Manager

Markus Wulftange · Publicado 2015-08-01 · Atualizado 2017-09-21 · CVE-2015-1489

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before 12.1-RU6-MP1

Description The issue allows remote authenticated users to gain privileges via unspecified vectors in the management console.

Recommendations For Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before 12.1-RU6-MP1, update to version 12.1-RU6-MP1 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1489

Produtos afetados

Symantec Endpoint Protection Manager

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sepm_auth_bypass_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/37812 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1489 · Nota
• http://securitytracker.com/id/1033165 · Nota
• http://securityfocus.com/bid/76078 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-1489 · Nota de Segurança