CVE-2015-1487: Input Validation

Published Aug 1, 2015

Updated

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.

Affected Software

1 affected component

Symantec Endpoint Protection Manager=12.1.0

Event History

Aug 1, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1487?

CVE-2015-1487 is considered a high severity vulnerability due to its ability to allow remote authenticated users to gain administrator privileges.

How do I fix CVE-2015-1487?

To fix CVE-2015-1487, upgrade Symantec Endpoint Protection Manager to version 12.1-RU6-MP1 or later.

Who is affected by CVE-2015-1487?

CVE-2015-1487 affects users of Symantec Endpoint Protection Manager version 12.1.0 prior to the 12.1-RU6-MP1 update.

What type of vulnerability is CVE-2015-1487?

CVE-2015-1487 is a file write vulnerability that can lead to unauthorized administrative access.

Can CVE-2015-1487 be exploited remotely?

Yes, CVE-2015-1487 can be exploited by remote authenticated users.