CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5835
https://notcve.org/view.php?id=CVE-2020-5835
Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine. Symantec Endpoint Protection Manager, versiones anteriores a 14.3, presenta una condición de carrera en la implementación remota del cliente que puede resultar en una elevación de privilegios sobre la máquina remota. • https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5834
https://notcve.org/view.php?id=CVE-2020-5834
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory. Symantec Endpoint Protection Manager, versiones anteriores a 14.3, puede ser susceptible a un ataque de salto de directorio que podría permitir a un actor remoto determinar el tamaño de los archivos en el directorio. • https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5833
https://notcve.org/view.php?id=CVE-2020-5833
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Symantec Endpoint Protection Manager, versiones anteriores a 14.3, puede ser susceptible a una vulnerabilidad fuera de límites, que es un tipo de problema que resulta en una aplicación existente que lee una memoria fuera de límites de la memoria que había sido asignada en el programa • https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762 • CWE-125: Out-of-bounds Read •
CVSS: 3.3EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5827 – Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2020-5827
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Symantec Endpoint Protection Manager (SEPM), versiones anteriores a 14.2 RU2 MP1, puede ser susceptible a una vulnerabilidad fuera de límites, que es un tipo de problema que resulta en que una aplicación existente lea la memoria fuera de los límites de la memoria que ha sido asignada al programa. This vulnerability allows local attackers to disclose sensitive information on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the secars.dll module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. • https://support.symantec.com/us/en/article.SYMSA1505.html • CWE-125: Out-of-bounds Read •
CVSS: 3.3EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5828 – Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2020-5828
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Symantec Endpoint Protection Manager (SEPM), versiones anteriores a 14.2 RU2 MP1, puede ser susceptible a una vulnerabilidad fuera de límites, que es un tipo de problema que resulta en que una aplicación existente lea la memoria fuera de los límites de la memoria que ha sido asignada al programa. This vulnerability allows local attackers to disclose sensitive information on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the secars.dll module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. • https://support.symantec.com/us/en/article.SYMSA1505.html • CWE-125: Out-of-bounds Read •