CVE-2019-12756: Low severity symantec endpoint protection vulnerability

Published Nov 15, 2019

Updated

Symantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability whereby the secondary layer of password protection could by bypassed for individuals with local administrator rights.

Affected Software

50 affected components

Symantec Endpoint Protection=11.0

Symantec Endpoint Protection=11.0-mr1

Symantec Endpoint Protection=11.0-mr2

Symantec Endpoint Protection=11.0-mr3

Symantec Endpoint Protection=11.0-mr4

Symantec Endpoint Protection=11.0-mr4-mp1a

Symantec Endpoint Protection=11.0-mr4-mp2

Symantec Endpoint Protection=11.0-ru5

Symantec Endpoint Protection=11.0-ru6

Symantec Endpoint Protection=11.0-ru6-mp1

Symantec Endpoint Protection=11.0-ru6-mp2

Symantec Endpoint Protection=11.0-ru6-mp3

Symantec Endpoint Protection=11.0-ru6a

Symantec Endpoint Protection=11.0-ru7

Symantec Endpoint Protection=11.0-ru7-mp1

Symantec Endpoint Protection=11.0-ru7-mp2

Symantec Endpoint Protection=11.0-ru7-mp3

Symantec Endpoint Protection=11.0-ru7-mp4

Symantec Endpoint Protection=11.0-ru7-mp4a

Symantec Endpoint Protection=12.1

Symantec Endpoint Protection=12.1-ru1

Symantec Endpoint Protection=12.1-ru1-p1

Symantec Endpoint Protection=12.1-ru2

Symantec Endpoint Protection=12.1-ru2-mp1

Symantec Endpoint Protection=12.1-ru3

Symantec Endpoint Protection=12.1-ru4

Symantec Endpoint Protection=12.1-ru4-mp1

Symantec Endpoint Protection=12.1-ru4-mp1a

Symantec Endpoint Protection=12.1-ru4-mp1b

Symantec Endpoint Protection=12.1-ru4a

Symantec Endpoint Protection=12.1-ru5

Symantec Endpoint Protection=12.1-ru6

Symantec Endpoint Protection=12.1-ru6-mp1

Symantec Endpoint Protection=12.1-ru6-mp2

Symantec Endpoint Protection=12.1-ru6-mp3

Symantec Endpoint Protection=12.1-ru6-mp4

Symantec Endpoint Protection=12.1-ru6-mp5

Symantec Endpoint Protection=12.1-ru6-mp6

Symantec Endpoint Protection=12.1-ru6-mp7

Symantec Endpoint Protection=12.1-ru6-mp8

Symantec Endpoint Protection=12.1-ru6-mp9

Symantec Endpoint Protection=14.0.0

Symantec Endpoint Protection=14.0.0-mp1

Symantec Endpoint Protection=14.0.0-mp2

Symantec Endpoint Protection=14.0.1

Symantec Endpoint Protection=14.0.1-mp1

Symantec Endpoint Protection=14.0.1-mp2

Symantec Endpoint Protection=14.2

Symantec Endpoint Protection=14.2-mp1

Symantec Endpoint Protection=14.2-ru1

Remediation

Patch Available

https://support.symantec.com/us/en/article.SYMSA1488.html

Event History

Nov 15, 2019

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-12756?

CVE-2019-12756 is a vulnerability in Symantec Endpoint Protection (SEP) that may allow for a password protection bypass.

Who is affected by CVE-2019-12756?

Individuals and organizations using Symantec Endpoint Protection (SEP) versions prior to 14.2 RU2 may be affected by CVE-2019-12756.

What is the severity of CVE-2019-12756?

CVE-2019-12756 has a severity rating of 2.3, which is considered low.

How can I fix CVE-2019-12756?

To fix CVE-2019-12756, you should update Symantec Endpoint Protection (SEP) to version 14.2 RU2 or later.

Where can I find more information about CVE-2019-12756?

More information about CVE-2019-12756 can be found in the Symantec article at the following link: [Symantec Article](https://support.symantec.com/us/en/article.SYMSA1488.html)