medium5.5Public exploit code
CVE-2015-1487
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit)2015-08-18 · remote · windows_x86 · Verified
Impact
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Endpoint Protection Manager | Version 12.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/76094
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/
- http://www.securityfocus.com/bid/76094
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/