CVE-2013-5009

Severity: high (CVSS 7.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-10 · updated 2026-06-16
Weakness: CWE-287

Description

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Affected products

Symantec Endpoint Protection: through 11.0.7.3; 11.0, 11.0-ru5, 11.0-ru6, 11.0-ru6a, 11.0-ru6mp1, 11.0-ru6mp2 (+17)

References

http://www.securityfocus.com/bid/64128
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90224
http://www.securityfocus.com/bid/64128
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90224

Get alerted when CVE-2013-5009 or the next vulnerability affects your stack