CVE-2014-9226
First published: Wed Jan 21 2015(Updated: )
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Symantec Critical System Protection | =5.2.9 | |
| Broadcom Symantec Data Center Security Server and Agents | =6.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html
- http://seclists.org/fulldisclosure/2015/Jan/91
- http://www.securityfocus.com/archive/1/534527/100/0/threaded
- http://www.securityfocus.com/bid/72095
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00
Frequently Asked Questions
What is the severity of CVE-2014-9226?
CVE-2014-9226 is classified as a medium severity vulnerability.
How do I fix CVE-2014-9226?
To mitigate CVE-2014-9226, ensure that you update Symantec Critical System Protection to version 5.2.9 MP7 or higher and Symantec Data Center Security to version 6.0 MP2 or higher.
What are the affected products for CVE-2014-9226?
The affected products for CVE-2014-9226 include Symantec Critical System Protection 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced 6.0.x through 6.0 MP1.
Who is at risk from CVE-2014-9226?
Local users of Symantec Critical System Protection and Symantec Data Center Security who have access to the management server are at risk from CVE-2014-9226.
What attack vectors are associated with CVE-2014-9226?
CVE-2014-9226 allows local users to bypass Protection Policies through unspecified vectors.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/broadcom
- canonical/broadcom symantec critical system protection
- version/broadcom symantec critical system protection/5.2.9
- vendor/symantec
- canonical/broadcom symantec data center security server and agents
- version/broadcom symantec data center security server and agents/6.0.0