High severity7.8NVD Advisory· Published May 11, 2020· Updated Jun 17, 2026

CVE-2020-5837

Description

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

Affected products

Broadcom Corporation/Endpoint Protectionllm-create
Range: <14.3
Symantec/Endpoint Protectionllm-fuzzy
Range: <14.3

Patches

Vulnerability mechanics

References

support.broadcom.com/security-advisory/security-advisory-detail.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000