CVE-2010-0114 — Improper Input Validation in Endpoint Protection

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.5HIGHNVD
EPSS
2.8%
top 13.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Endpoint Protection
Timeline
PublishedDec 22
Latest updateMay 2

Description

fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xrfj-rj8v-v2j3: fw_charts↗2022-05-02
▶
CVEList
CVE-2010-0114: fw_charts↗2010-12-22
▶

💬Community

1
Bugzilla
CVE-2010-0188 acroread: unspecified code execution flaw↗2010-02-17
▶
CVE-2010-0114 — Improper Input Validation in Symantec | cvebase