CVE-2020-5837

CWE-593 documents3 sources
Severity
7.8HIGH
EPSS
1.8%
top 17.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Endpoint Protection
Timeline
PublishedMay 11
Latest updateMay 24

Description

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5symantec_endpoint_protectionPrior to 14.3

🔴Vulnerability Details

2
GHSA
GHSA-qfhx-mfmg-3wfg: Symantec Endpoint Protection, prior to 14↗2022-05-24
▶
CVEList
CVE-2020-5837: Symantec Endpoint Protection, prior to 14↗2020-05-11
▶