Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2013-5009

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

  • Published: Jan 10, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-5009
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.4
  • AV:A/AC:M/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
symantec / endpoint_protection - 11.0.7.3.x
symantec / endpoint_protection 11.0.4-mp1a 11.0.4-mp1a.x
symantec / endpoint_protection 11.0.2 11.0.2.x
symantec / endpoint_protection 11.0.6300 11.0.6300.x
symantec / endpoint_protection 11.0-ru6a 11.0-ru6a.x
symantec / endpoint_protection 11.0.4 11.0.4.x
symantec / endpoint_protection 11.0-ru6mp2 11.0-ru6mp2.x
symantec / endpoint_protection 11.0.4-mp2 11.0.4-mp2.x
symantec / endpoint_protection 11.0.1-mp1 11.0.1-mp1.x
symantec / endpoint_protection 11.0 11.0.x
symantec / endpoint_protection 11.0.2-mp2 11.0.2-mp2.x
symantec / endpoint_protection 11.0-ru5 11.0-ru5.x
symantec / endpoint_protection 11.0-ru6 11.0-ru6.x
symantec / endpoint_protection 11.0.7000 11.0.7000.x
symantec / endpoint_protection 11.0.3001 11.0.3001.x
symantec / endpoint_protection 11.0.6200.754 11.0.6200.754.x
symantec / endpoint_protection 11.0.7100 11.0.7100.x
symantec / endpoint_protection 11.0.6100 11.0.6100.x
symantec / endpoint_protection 11.0-ru6mp1 11.0-ru6mp1.x
symantec / endpoint_protection 11.0.1-mp2 11.0.1-mp2.x
symantec / endpoint_protection 11.0.6000 11.0.6000.x
symantec / endpoint_protection 11.0.2-mp1 11.0.2-mp1.x
symantec / endpoint_protection 11.0.6200 11.0.6200.x
symantec / endpoint_protection 11.0.1 11.0.1.x