CVE-2013-5010

The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
symantecCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
VendorProductVersion
symantecendpoint_protection
𝑥
≤ 11.0.7.3
symantecendpoint_protection
11.0
symantecendpoint_protection
11.0:ru5
symantecendpoint_protection
11.0:ru6
symantecendpoint_protection
11.0:ru6a
symantecendpoint_protection
11.0:ru6mp1
symantecendpoint_protection
11.0:ru6mp2
symantecendpoint_protection
11.0.1
symantecendpoint_protection
11.0.1:mp1
symantecendpoint_protection
11.0.1:mp2
symantecendpoint_protection
11.0.2
symantecendpoint_protection
11.0.2:mp1
symantecendpoint_protection
11.0.2:mp2
symantecendpoint_protection
11.0.4
symantecendpoint_protection
11.0.4:mp1a
symantecendpoint_protection
11.0.4:mp2
symantecendpoint_protection
11.0.3001
symantecendpoint_protection
11.0.6000
symantecendpoint_protection
11.0.6100
symantecendpoint_protection
11.0.6200
symantecendpoint_protection
11.0.6200.754
symantecendpoint_protection
11.0.6300
symantecendpoint_protection
11.0.7000
symantecendpoint_protection
11.0.7100
𝑥
= Vulnerable software versions
Common Weakness Enumeration