CVE-2017-6331
HighSummary
Prior to SEP 14 RU1, the Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real-time protection for the application that is run on servers and clients.
Risk Assessment
Tamper-Protection Bypass can lead to increased risk of malicious attacks on systems, potentially resulting in data loss or security breaches.
Recommendation
It is recommended to upgrade to SEP 14 RU1 or later to protect against this type of attack.
Other vulnerabilities in Symantec Endpoint Protection
See all- CVE-2017-13681High
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, allowing a user to gain elevated access to resources normally protected at lower access levels.
- CVE-2015-1492High
CVE-2015-1492 describes an untrusted search path vulnerability in the client of Symantec Endpoint Protection 12.1 before version 12.1-RU6-MP1, allowing local users to gain privileges via a Trojan horse DLL in a client install package.
Original NVD description (English source)
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.