CVE-2015-8113 — Endpoint Protection vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
CNA8.5
EPSS
0.2%
top 53.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Endpoint Protection
Timeline
PublishedNov 12
Latest updateMay 17

Description

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rv3v-f2rv-x37w: Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12↗2022-05-17
▶
CVEList
CVE-2015-8113: Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12↗2015-11-12
▶
CVE-2015-8113 — Symantec vulnerability | cvebase