PT-2018-16831 · Symantec · Symantec Management Agent

Publicado 2018-07-25 · Atualizado 2019-10-03 · CVE-2018-5240

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Management Agent versions prior to 7.6 POST HF7 Symantec Management Agent versions prior to 8.0 POST HF6 Symantec Management Agent versions prior to 8.1 RU7

Description The issue is related to a privilege escalation vulnerability in the Inventory Plugin for Symantec Management Agent. This type of issue allows a user to gain elevated access to resources that are normally protected at lower access levels.

Recommendations For versions prior to 7.6 POST HF7, update to 7.6 POST HF7 or later. For versions prior to 8.0 POST HF6, update to 8.0 POST HF6 or later. For versions prior to 8.1 RU7, update to 8.1 RU7 or later.

Correção

Identificadores relacionados

CVE-2018-5240

Produtos afetados

Symantec Management Agent

Referências · 5

• http://securityfocus.com/bid/104753 · Nota
• https://support.symantec.com/en_US/article.SYMSA1456.html · Aviso do Fabricante
• http://securitytracker.com/id/1041654 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5240 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5240 · Aviso do Fabricante