Symantec Endpoint Encryption CVE-2019-9694 Local Privilege Escalation Vulnerability

Bugtraq ID:	107653
Class:	Design Error
CVE:	CVE-2019-9694
Remote:	No
Local:	Yes
Published:	Apr 08 2019 12:00AM
Updated:	Apr 08 2019 12:00AM
Credit:	Terry Conway
Vulnerable:	Symantec Endpoint Encryption 11.2 Symantec Endpoint Encryption 11.1.3 Symantec Endpoint Encryption 11.1.2 Symantec Endpoint Encryption 11.1.1 Symantec Endpoint Encryption 11.1 Symantec Endpoint Encryption 11.1.3 MP1 Symantec Endpoint Encryption 11.1.3 HF3 Symantec Endpoint Encryption 11.1.3 HF2 Symantec Endpoint Encryption 11.0
Not Vulnerable:	Symantec Endpoint Encryption 11.2.1 MP1

Symantec Endpoint Encryption CVE-2019-9694 Local Privilege Escalation Vulnerability

Symantec Endpoint Encryption is prone to an unspecified local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain elevated privileges.

Versions prior to Symantec Endpoint Encryption 11.2.1 MP1 are vulnerable.

Symantec Endpoint Encryption CVE-2019-9694 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Endpoint Encryption CVE-2019-9694 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Endpoint Encryption CVE-2019-9694 Local Privilege Escalation Vulnerability

References:

• Symantec Homepage (Symantec)
  
• SYMSA1478: Symantec Endpoint Encryption Privilege Escalation (Symantec)