CVE-2015-1489 : The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 befor

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.

Published 2015-08-01 01:59:06

Updated 2025-04-12 10:46:41

Source Symantec Corporation

View at NVD, CVE.org

Products affected by CVE-2015-1489

Symantec » Endpoint Protection Manager » Version: 12.1.0
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-1489

EPSS FAQ

60.77%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2015-1489

Symantec Endpoint Protection Manager Authentication Bypass and Code Execution

Disclosure Date: 2015-07-31

First seen: 2020-04-26

exploit/windows/http/sepm_auth_bypass_rce

This module exploits three separate vulnerabilities in Symantec Endpoint Protection Manager in order to achieve a remote shell on the box as NT AUTHORITY\SYSTEM. The vulnerabilities include an authentication bypass, a directory traversal and a privilege escalation to

More information

CVSS scores for CVE-2015-1489

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
8.5	HIGH	AV:N/AC:M/Au:S/C:C/I:C/A:C	6.8	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2015-1489

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-1489

http://www.securitytracker.com/id/1033165

Symantec Endpoint Protection Multiple Flaws Let Remote Users Bypass Authenticated and Remote Authenticated Users Read/Write Files, Inject SQL Commands, and Gain Elevated Privileges - SecurityTracker

CVEs referencing this url
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00

Symantec Endpoint Protection Multiple Issues
Vendor Advisory

CVEs referencing this url
https://www.exploit-db.com/exploits/37812/

Symantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit)

CVEs referencing this url
http://www.securityfocus.com/bid/76078

Symantec Endpoint Protection Manager CVE-2015-1489 Remote Privilege Escalation Vulnerability

Jump to