CVE-2012-0294 — Path Traversal in Endpoint Protection

CWE-22 — Path Traversal3 documents3 sources

Severity

5.8MEDIUMNVD

EPSS

0.3%

top 50.80%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Symantec Endpoint Protection

Timeline

PublishedMay 23

Latest updateMay 4

Description

Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDsymantec/endpoint_protection12.1, 12.1.1000, 12.1.671+2

🔴Vulnerability Details

GHSA

GHSA-586v-xv8v-gc4w: Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12↗2022-05-04

▶

CVEList

CVE-2012-0294: Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12↗2012-05-23

▶