What is CVE-2018-5237?

CVE-2018-5237 is a privilege escalation vulnerability in Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10.

How severe is CVE-2018-5237?

CVE-2018-5237 has a severity rating of 8.8 (high).

Which software versions of Symantec Endpoint Protection are affected by CVE-2018-5237?

Symantec Endpoint Protection versions prior to 14 RU1 MP1 or 12.1 RU6 MP10 are affected by CVE-2018-5237.

How can I fix CVE-2018-5237?

To fix CVE-2018-5237, update Symantec Endpoint Protection to version 14 RU1 MP1 or 12.1 RU6 MP10.

Where can I get more information about CVE-2018-5237?

You can find more information about CVE-2018-5237 on the following references: [securityfocus.com](http://www.securityfocus.com/bid/104199), [securitytracker.com](http://www.securitytracker.com/id/1041180), [support.symantec.com](https://support.symantec.com/en_US/article.SYMSA1454.html)

Vulnerability/
CVE-2018-5237

high

8.8

20/6/2018

3/10/2019

CVE-2018-5237

First published: Wed Jun 20 2018(Updated: )

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Credit: secure@symantec.com

Affected Software	Affected Version	How to fix
Symantec Endpoint Protection	<=14.0
Symantec Endpoint Protection	=12.1-ru6mp10
Symantec Endpoint Protection	=14.0-ru1mp1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2018-5237?
CVE-2018-5237 is a privilege escalation vulnerability in Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10.
How severe is CVE-2018-5237?
CVE-2018-5237 has a severity rating of 8.8 (high).
Which software versions of Symantec Endpoint Protection are affected by CVE-2018-5237?
Symantec Endpoint Protection versions prior to 14 RU1 MP1 or 12.1 RU6 MP10 are affected by CVE-2018-5237.
How can I fix CVE-2018-5237?
To fix CVE-2018-5237, update Symantec Endpoint Protection to version 14 RU1 MP1 or 12.1 RU6 MP10.
Where can I get more information about CVE-2018-5237?
You can find more information about CVE-2018-5237 on the following references: [securityfocus.com](http://www.securityfocus.com/bid/104199), [securitytracker.com](http://www.securitytracker.com/id/1041180), [support.symantec.com](https://support.symantec.com/en_US/article.SYMSA1454.html)

collector/nvd-index
agent/severity
agent/author
agent/references
agent/tags
agent/event
agent/type
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
vendor/symantec
canonical/symantec endpoint protection
version/symantec endpoint protection/14.0
version/symantec endpoint protection/12.1-ru6mp10
version/symantec endpoint protection/14.0-ru1mp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.