Skip to main content

Symantec CVE-2015-8801

LOW
7PK - Security Features (CWE-254)
2016-06-30 secure@symantec.com
Authentication Bypass Symantec Endpoint Protection Manager
2.9
CVSS 3.0 · NVD

Severity by source

NVD PRIMARY
2.9 LOW
AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Physical
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Jun 30, 2016 - 23:59 cve.org
LOW 2.9

DescriptionCVE.org

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.

AnalysisAI

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations. Rated low severity (CVSS 2.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-254. Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device. Affected products include: Symantec Endpoint Protection Manager.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Symantec

View all
CVE-2017-6327 HIGH POC
8.8 Aug 11

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situ
CVE-2012-0297 CRITICAL POC
10.0 May 21

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,

CVE-2012-2953 CRITICAL POC
10.0 Jul 23

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
CVE-2012-0299 CRITICAL POC
10.0 May 21

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to u
CVE-2017-6326 CRITICAL POC
10.0 Jun 26

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i
CVE-2013-5014 HIGH POC
7.5 Feb 14

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
CVE-2015-1486 HIGH POC
7.5 Aug 01

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers t
CVE-2016-3645 CRITICAL POC
9.8 Jun 30

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); S
CVE-2014-7285 MEDIUM POC
6.5 Dec 17

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to exe
CVE-2015-1489 HIGH POC
8.5 Aug 01

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticat
CVE-2013-5015 MEDIUM POC
6.5 Feb 14

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
CVE-2016-2208 CRITICAL POC
9.1 May 19

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute a

Same weakness CWE-254 – 7PK - Security Features

View all
CVE-2015-1158 CRITICAL POC
10.0
CVE-2016-2296 CRITICAL POC
9.4
CVE-2016-2118 HIGH POC
7.5
CVE-2015-1793 MEDIUM POC
6.5
CVE-2015-3693 CRITICAL POC
9.3
CVE-2016-0128 MEDIUM
6.8
CVE-2016-10178 CRITICAL POC
9.8
CVE-2015-8286 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2015-8801 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy