CVE-2013-5010 Security feature bypass in n/a

Medium 4.6 Published 10 Jan 2014 Updated 6 Aug 2024

Local attackers can bypass Symantec Endpoint Protection policy restrictions to access restricted files or directories.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-5010?

CVE-2013-5010 is a medium-severity vulnerability in Symantec Endpoint Protection, published on 10 Jan 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.

Weakness: CWE-264

Which versions are affected by CVE-2013-5010?

It affects 1 product.

Products include Symantec Endpoint Protection.

How do I fix CVE-2013-5010?

No fix has been published for CVE-2013-5010 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-5010 being exploited?

There is no known exploitation of CVE-2013-5010 in the wild and no public exploit code.

All Symantec Endpoint Protection vulnerabilities

Sources

Also known as GHSA-q2w9-m8p6-296j.