Title

Symantec Enterprise Security Manager (ESM) Privilege Escalation Vulnerability (Cat II impact)

Discussion

Symantec has released a security advisory addressing a privilege escalation vulnerability in Symantec Enterprise Security Manager (ESM). Symantec ESM products automate the discovery of vulnerabilities in an enterprise environment. To exploit this vulnerability, an attacker would construct a malicious executable file and place it in the root path. When the application is initiated, the malicious file will execute resulting in the compromise of affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-36449

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.