CVE Vulnerabilities

CVE-2013-5009

Improper Authentication

Published: Jan 10, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.4 HIGH
AV:A/AC:M/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Endpoint_protection Symantec * 11.0.7.3
Endpoint_protection Symantec 11.0.4 11.0.4
Endpoint_protection Symantec 11.0.2 11.0.2
Endpoint_protection Symantec 11.0.6300 11.0.6300
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0.4 11.0.4
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0.4 11.0.4
Endpoint_protection Symantec 11.0.1 11.0.1
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0.2 11.0.2
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0.7000 11.0.7000
Endpoint_protection Symantec 11.0.3001 11.0.3001
Endpoint_protection Symantec 11.0.6200.754 11.0.6200.754
Endpoint_protection Symantec 11.0.7100 11.0.7100
Endpoint_protection Symantec 11.0.6100 11.0.6100
Endpoint_protection Symantec 11.0 11.0
Endpoint_protection Symantec 11.0.1 11.0.1
Endpoint_protection Symantec 11.0.6000 11.0.6000
Endpoint_protection Symantec 11.0.2 11.0.2
Endpoint_protection Symantec 11.0.6200 11.0.6200
Endpoint_protection Symantec 11.0.1 11.0.1

Potential Mitigations

References