PT-2016-4031 · Symantec · Symantec Endpoint Protection+2

Publicado 2016-06-30 · Atualizado 2017-09-01 · CVE-2015-8801

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection version 12.1 before RU6 MP5

Description A race condition in the client allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the device manager recognizes a new USB device.

Recommendations For Symantec Endpoint Protection version 12.1 before RU6 MP5, update to RU6 MP5 or later to resolve the issue. As a temporary workaround, consider restricting access to USB devices until the update is applied.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-254

Identificadores relacionados

CVE-2015-8801

Produtos afetados

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Symantec Endpoint Protection Server

Referências · 5

• http://securityfocus.com/bid/91446 · Nota
• http://securitytracker.com/id/1036196 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8801 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8801 · Nota de Segurança
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 · Aviso do Fabricante