Vulnerability Details CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.124
EPSS Ranking 93.6%
CVSS Severity
CVSS v2 Score 6.1
References
- http://seclists.org/fulldisclosure/2014/Nov/7
- http://www.securityfocus.com/archive/1/533918/100/0/threaded
- http://www.securityfocus.com/bid/70845
- http://www.securitytracker.com/id/1031176
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98527
- http://seclists.org/fulldisclosure/2014/Nov/7
- http://www.securityfocus.com/archive/1/533918/100/0/threaded
- http://www.securityfocus.com/bid/70845
- http://www.securitytracker.com/id/1031176
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98527
Products affected by CVE-2014-3439
-
cpe:2.3:a:symantec:endpoint_protection_manager:11.0
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.0
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.1
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.2
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.3