CVE-2020-5837

moderate-risk
Published 2020-05-11

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

Do I need to act?

~
1.8% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Symantec

References (2)

Vendor Advisory https://support.broadcom.com/security-advisory/security-advisory-detail.html?not...
Vendor Advisory https://support.broadcom.com/security-advisory/security-advisory-detail.html?not...
34
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 5/34 · Minimal
Exposure 5/34 · Minimal