8.8
Advisory Published
Updated

CVE-2018-5237

First published: Wed Jun 20 2018(Updated: )

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Credit: secure@symantec.com

Affected SoftwareAffected VersionHow to fix
Symantec Endpoint Protection<=14.0
Symantec Endpoint Protection=12.1-ru6mp10
Symantec Endpoint Protection=14.0-ru1mp1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2018-5237?

    CVE-2018-5237 is a privilege escalation vulnerability in Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10.

  • How severe is CVE-2018-5237?

    CVE-2018-5237 has a severity rating of 8.8 (high).

  • Which software versions of Symantec Endpoint Protection are affected by CVE-2018-5237?

    Symantec Endpoint Protection versions prior to 14 RU1 MP1 or 12.1 RU6 MP10 are affected by CVE-2018-5237.

  • How can I fix CVE-2018-5237?

    To fix CVE-2018-5237, update Symantec Endpoint Protection to version 14 RU1 MP1 or 12.1 RU6 MP10.

  • Where can I get more information about CVE-2018-5237?

    You can find more information about CVE-2018-5237 on the following references: [securityfocus.com](http://www.securityfocus.com/bid/104199), [securitytracker.com](http://www.securitytracker.com/id/1041180), [support.symantec.com](https://support.symantec.com/en_US/article.SYMSA1454.html)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203