NetSight
high7.8

CVE-2020-5837

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to …

Impact

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

Affected products

VendorProductAffected versions
SymantecEndpoint Protection
before 14.3

Weakness classification

References