CVE-2013-5010
Summary
| CVE | CVE-2013-5010 |
|---|---|
| State | PUBLISHED |
| Assigner | symantec |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-10 16:47:05 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors. |
Risk And Classification
Primary CVSS: v2.0 4.6 from [email protected]
AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS: 0.000720000 probability, percentile 0.217280000 (date 2026-05-01)
Problem Types: CWE-264 | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Symantec | Endpoint Protection | 11.0 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0 | ru5 | All | All |
| Application | Symantec | Endpoint Protection | 11.0 | ru6 | All | All |
| Application | Symantec | Endpoint Protection | 11.0 | ru6a | All | All |
| Application | Symantec | Endpoint Protection | 11.0 | ru6mp1 | All | All |
| Application | Symantec | Endpoint Protection | 11.0 | ru6mp2 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.1 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.1 | mp1 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.1 | mp2 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.2 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.2 | mp1 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.2 | mp2 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.3001 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.4 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.4 | mp1a | All | All |
| Application | Symantec | Endpoint Protection | 11.0.4 | mp2 | All | All |
| Application | Symantec | Endpoint Protection | 11.0.6000 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.6100 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.6200 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.6200.754 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.6300 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.7000 | All | All | All |
| Application | Symantec | Endpoint Protection | 11.0.7100 | All | All | All |
| Application | Symantec | Endpoint Protection | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisories Relating to Symantec Products - Symantec Endpoint Protection Privilege Assumption, Policy Bypass, Local Elevation of Privilege - 2014-01-09T11:22:55 PST | Symantec | af854a3a-2127-422b-91ae-364da2661108 | www.symantec.com | Vendor Advisory |
| Symantec Endpoint Protection CVE-2013-5010 Local Unauthorized Access Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.