high8.5Public exploit code
CVE-2015-1489
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspeci…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit)2015-08-18 · remote · windows_x86 · Verified
Impact
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Endpoint Protection Manager | Version 12.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/76078
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/
- http://www.securityfocus.com/bid/76078
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/