Symantec Endpoint Encryption CVE-2019-9702 Local Privilege Escalation Vulnerability

Bugtraq ID:	108795
Class:	Design Error
CVE:	CVE-2019-9702
Remote:	No
Local:	Yes
Published:	Jun 28 2019 12:00AM
Updated:	Jun 28 2019 12:00AM
Credit:	Kyriakos Economou
Vulnerable:	Symantec Endpoint Encryption 11.2 Symantec Endpoint Encryption 11.1.3 Symantec Endpoint Encryption 11.1.2 Symantec Endpoint Encryption 11.1.1 Symantec Endpoint Encryption 11.1 Symantec Endpoint Encryption 11.2.1 MP1 Symantec Endpoint Encryption 11.1.3 MP1 Symantec Endpoint Encryption 11.1.3 HF3 Symantec Endpoint Encryption 11.1.3 HF2 Symantec Endpoint Encryption 11.0 Symantec Encryption Desktop 10.4.1 MP1 Symantec Encryption Desktop 10.3 Symantec Encryption Desktop 10.4.1 MP2HF1 Symantec Encryption Desktop 10.4.1 MP2 Symantec Encryption Desktop 10.3.2 MP3 Symantec Encryption Desktop 10.3.2 Symantec Encryption Desktop 10.3.1 Symantec Encryption Desktop 10.3.0 MP3 Symantec Encryption Desktop 10.3.0 MP2
Not Vulnerable:	Symantec Endpoint Encryption 11.3.0

Symantec Endpoint Encryption CVE-2019-9702 Local Privilege Escalation Vulnerability

Symantec Endpoint Encryption is prone to an unspecified local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain elevated privileges.

Versions prior to Symantec Endpoint Encryption 11.3.0 are vulnerable.

Symantec Endpoint Encryption CVE-2019-9702 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Endpoint Encryption CVE-2019-9702 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Endpoint Encryption CVE-2019-9702 Local Privilege Escalation Vulnerability

References:

• Symantec Homepage (Symantec)