← Zuruck zu CVEs

CVE-2016-6590

HIGH

7.8

Beschreibung

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht1/8/2020

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

symantec:encryption_desktopsymantec:endpoint_encryptionsymantec:ghost_solution_suitesymantec:it_management_suite

Schwachen (CWE)

CWE-269

Referenzen

http://www.securityfocus.com/bid/94279(secure@symantec.com)

http://www.securitytracker.com/id/1037302(secure@symantec.com)

https://support.symantec.com/us/en/article.symsa1385.html(secure@symantec.com)

http://www.securityfocus.com/bid/94279(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1037302(af854a3a-2127-422b-91ae-364da2661108)

https://support.symantec.com/us/en/article.symsa1385.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.