Vulnerability in Symantec Endpoint_protection_manager
CVE-2015-8801
Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a n…
EPSS: 0.001 (18.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.9 (Low). Vector: CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Symantec Endpoint_protection_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
- 1036196 (vdb-entry, x_refsource_SECTRACK)
- 91446 (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2015-8801?
- CVE-2015-8801 is a low-severity vulnerability in Symantec Endpoint_protection_manager, classified under CWE-254. CVSS score: 2.9/10. Published 2016-06-30.
- How severe is CVE-2015-8801?
- Low severity. CVSS v3 base score is 2.9 out of 10.