PT-2015-5325 · Symantec · Symantec Endpoint Protection Manager

Markus Wulftange · Published 2015-08-01 · Updated 2017-09-21 · CVE-2015-1489

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before 12.1-RU6-MP1

Description The issue allows remote authenticated users to gain privileges via unspecified vectors in the management console.

Recommendations For Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before 12.1-RU6-MP1, update to version 12.1-RU6-MP1 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-1489

Affected Products

Symantec Endpoint Protection Manager

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sepm_auth_bypass_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/37812 · Exploit
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1489 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1489 · Note
• http://securitytracker.com/id/1033165 · Note
• http://securityfocus.com/bid/76078 · Note