VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2014· Updated Jun 16, 2026

CVE-2013-5009

CVE-2013-5009

Description

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Affected products

26
  • Symantec/Endpoint Protection25 versions
    cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*range: <=11.0.7.3
    • cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.6000:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.6100:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.6200:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.6200.754:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.6300:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.7000:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0.7100:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:*
    • (no CPE)range: <=11.0.7.4 (11.x), <=12.1.2 RU2 (12.x)
  • Symantec/Endpoint Protection Small Business Editionllm-fuzzy
    Range: <=12.1.2 RU2 (12.x)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.