Lucene search

K
nvd[email protected]NVD:CVE-2019-9694
HistoryApr 10, 2019 - 8:29 p.m.

CVE-2019-9694

2019-04-1020:29:01
web.nvd.nist.gov
8

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

14.1%

Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected configurations

Nvd
Node
symantecendpoint_encryptionMatch11.0
OR
symantecendpoint_encryptionMatch11.1
OR
symantecendpoint_encryptionMatch11.1.1
OR
symantecendpoint_encryptionMatch11.1.2
OR
symantecendpoint_encryptionMatch11.1.3
OR
symantecendpoint_encryptionMatch11.1.3hf2
OR
symantecendpoint_encryptionMatch11.1.3hf3
OR
symantecendpoint_encryptionMatch11.1.3mp1
OR
symantecendpoint_encryptionMatch11.2
VendorProductVersionCPE
symantecendpoint_encryption11.0cpe:2.3:a:symantec:endpoint_encryption:11.0:*:*:*:*:*:*:*
symantecendpoint_encryption11.1cpe:2.3:a:symantec:endpoint_encryption:11.1:*:*:*:*:*:*:*
symantecendpoint_encryption11.1.1cpe:2.3:a:symantec:endpoint_encryption:11.1.1:*:*:*:*:*:*:*
symantecendpoint_encryption11.1.2cpe:2.3:a:symantec:endpoint_encryption:11.1.2:*:*:*:*:*:*:*
symantecendpoint_encryption11.1.3cpe:2.3:a:symantec:endpoint_encryption:11.1.3:*:*:*:*:*:*:*
symantecendpoint_encryption11.1.3cpe:2.3:a:symantec:endpoint_encryption:11.1.3:hf2:*:*:*:*:*:*
symantecendpoint_encryption11.1.3cpe:2.3:a:symantec:endpoint_encryption:11.1.3:hf3:*:*:*:*:*:*
symantecendpoint_encryption11.1.3cpe:2.3:a:symantec:endpoint_encryption:11.1.3:mp1:*:*:*:*:*:*
symantecendpoint_encryption11.2cpe:2.3:a:symantec:endpoint_encryption:11.2:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

14.1%

Related for NVD:CVE-2019-9694