CVE-2015-8156: High severity symantec endpoint encryption vulnerability
Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8156?
CVE-2015-8156 is rated as a high-severity vulnerability that allows local users to gain elevated privileges.
How do I fix CVE-2015-8156?
To fix CVE-2015-8156, update Symantec Endpoint Encryption to version 11.1.1 or later which addresses this vulnerability.
What software is affected by CVE-2015-8156?
CVE-2015-8156 affects Symantec Endpoint Encryption versions 11.0, 11.0.0, and 11.0.1.
Can CVE-2015-8156 be exploited locally?
Yes, CVE-2015-8156 can be exploited locally by a user placing a Trojan horse executable in the %SYSTEMDRIVE% directory.
Is there a workaround for CVE-2015-8156?
There is no official workaround for CVE-2015-8156; the recommended action is to apply the latest security update.