CVE-2012-4350

2012-12-1820:55:01

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.5%

JSON

Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

symantecenterprise_security_managerRange≤10.0

symantecenterprise_security_managerMatch6.0

symantecenterprise_security_managerMatch6.5

symantecenterprise_security_managerMatch6.5.0

symantecenterprise_security_managerMatch6.5.1

symantecenterprise_security_managerMatch6.5.2

symantecenterprise_security_managerMatch6.5.3

symantecenterprise_security_managerMatch9.0

symantecenterprise_security_managerMatch9.0.1

VendorProductVersionCPE
symantecenterprise_security_manager*cpe:2.3:a:symantec:enterprise_security_manager:*:*:*:*:*:*:*:*
symantecenterprise_security_manager6.0cpe:2.3:a:symantec:enterprise_security_manager:6.0:*:*:*:*:*:*:*
symantecenterprise_security_manager6.5cpe:2.3:a:symantec:enterprise_security_manager:6.5:*:*:*:*:*:*:*
symantecenterprise_security_manager6.5.0cpe:2.3:a:symantec:enterprise_security_manager:6.5.0:*:*:*:*:*:*:*
symantecenterprise_security_manager6.5.1cpe:2.3:a:symantec:enterprise_security_manager:6.5.1:*:*:*:*:*:*:*
symantecenterprise_security_manager6.5.2cpe:2.3:a:symantec:enterprise_security_manager:6.5.2:*:*:*:*:*:*:*
symantecenterprise_security_manager6.5.3cpe:2.3:a:symantec:enterprise_security_manager:6.5.3:*:*:*:*:*:*:*
symantecenterprise_security_manager9.0cpe:2.3:a:symantec:enterprise_security_manager:9.0:*:*:*:*:*:*:*
symantecenterprise_security_manager9.0.1cpe:2.3:a:symantec:enterprise_security_manager:9.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	enterprise_security_manager	*	cpe:2.3:a:symantec:enterprise_security_manager::::::::
symantec	enterprise_security_manager	6.0	cpe:2.3:a:symantec:enterprise_security_manager:6.0:::::::*
symantec	enterprise_security_manager	6.5	cpe:2.3:a:symantec:enterprise_security_manager:6.5:::::::*
symantec	enterprise_security_manager	6.5.0	cpe:2.3:a:symantec:enterprise_security_manager:6.5.0:::::::*
symantec	enterprise_security_manager	6.5.1	cpe:2.3:a:symantec:enterprise_security_manager:6.5.1:::::::*
symantec	enterprise_security_manager	6.5.2	cpe:2.3:a:symantec:enterprise_security_manager:6.5.2:::::::*
symantec	enterprise_security_manager	6.5.3	cpe:2.3:a:symantec:enterprise_security_manager:6.5.3:::::::*
symantec	enterprise_security_manager	9.0	cpe:2.3:a:symantec:enterprise_security_manager:9.0:::::::*
symantec	enterprise_security_manager	9.0.1	cpe:2.3:a:symantec:enterprise_security_manager:9.0.1:::::::*