PT-2020-18744 · Symantec · Symantec Endpoint Protection Manager+1

Published 2020-05-11 · Updated 2020-05-14 · CVE-2020-5835

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3

Description The issue is related to a race condition in the client remote deployment feature, which could potentially lead to an elevation of privilege on the remote machine.

Recommendations For versions prior to 14.3, update to version 14.3 or later to resolve the issue.

Fix

LPE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2020-5835

Affected Products

Symantec Endpoint Protection Manager

Symantec Endpoint Protection Server

References · 3

• https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5835 · Security Note