CVE-2018-18368: symantec endpoint_protection_manager Improper Privilege Management

Vulnerability summary

CVE-2018-18368 is a high (CVSS 7.8) Improper Privilege Management vulnerability in symantec endpoint_protection_manager. EPSS estimates a 0.58% chance of exploitation in the next 30 days, higher than 46.5% of scored vulnerabilities.

Timeline

1. 15-11-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.