Lucene search

SymantecCVE-2014-9227

HistorySep 20, 2015 - 8:59 p.m.

CVE-2014-9227

2015-09-2020:59:00

symantec

web.nvd.nist.gov

cve

2014

9227

untrusted search path

vulnerability

symantec endpoint protection

sep

manager

trojan horse dll

local users

privileges

nvd

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

26.1%

JSON

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

Nvd

Node

symantecendpoint_protectionRange≤12.1.5

VendorProductVersionCPE
symantecendpoint_protection*cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	endpoint_protection	*	cpe:2.3:a:symantec:endpoint_protection::::::::

References

www.securityfocus.com/bid/75203

www.securitytracker.com/id/1032616

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150617_00

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

26.1%

JSON

Related for CVE-2014-9227