PT-2019-19809 · Symantec · Symantec Endpoint Encryption

Published 2019-07-01 · Updated 2020-08-24 · CVE-2019-9702

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Encryption versions prior to 11.3.0

Description The issue is a privilege escalation vulnerability, which allows a user to gain elevated access to resources that are normally protected at lower access levels.

Recommendations For versions prior to 11.3.0, update to version 11.3.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2019-9702

Affected Products

Symantec Endpoint Encryption

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-9702 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9702 · Vendor Advisory
• https://support.symantec.com/us/en/article.SYMSA1485.html · Vendor Advisory
• http://securityfocus.com/bid/108795 · Note