CVE-2015-1492
HighSummary
CVE-2015-1492 describes an untrusted search path vulnerability in the client of Symantec Endpoint Protection 12.1 before version 12.1-RU6-MP1, allowing local users to gain privileges via a Trojan horse DLL in a client install package.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update Symantec Endpoint Protection to version 12.1-RU6-MP1 or later to mitigate this vulnerability.
Other vulnerabilities in Symantec Endpoint Protection 12.1
See all- CVE-2017-6331High
Prior to SEP 14 RU1, the Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real-time protection for the application that is run on servers and clients.
- CVE-2017-13681High
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, allowing a user to gain elevated access to resources normally protected at lower access levels.
Original NVD description (English source)
Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package.