Skip to main content

Symantec CVE-2016-2202

MEDIUM
Permissions, Privileges, and Access Controls (CWE-264)
2016-04-20 secure@symantec.com
Privilege Escalation Symantec Altiris It Management Suite
5.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 20, 2016 - 17:59 cve.org
MEDIUM 5.5

DescriptionCVE.org

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors.

AnalysisAI

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors. Affected products include: Symantec Altiris It Management Suite. Version information: through 7.6.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Symantec

View all
CVE-2017-6327 HIGH POC
8.8 Aug 11

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situ
CVE-2012-0297 CRITICAL POC
10.0 May 21

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,

CVE-2012-2953 CRITICAL POC
10.0 Jul 23

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
CVE-2012-0299 CRITICAL POC
10.0 May 21

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to u
CVE-2017-6326 CRITICAL POC
10.0 Jun 26

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i
CVE-2013-5014 HIGH POC
7.5 Feb 14

The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
CVE-2015-1486 HIGH POC
7.5 Aug 01

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers t
CVE-2016-3645 CRITICAL POC
9.8 Jun 30

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); S
CVE-2014-7285 MEDIUM POC
6.5 Dec 17

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to exe
CVE-2015-1489 HIGH POC
8.5 Aug 01

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticat
CVE-2013-5015 MEDIUM POC
6.5 Feb 14

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
CVE-2016-2208 CRITICAL POC
9.1 May 19

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute a

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2016-2202 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy