CVE-2015-6556 Information disclosure in n/a
Authenticated remote attackers can discover credentials by triggering a memory dump in the Symantec Endpoint Encryption client service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-6556?
CVE-2015-6556 is a low-severity vulnerability in n/a, published on 18 Dec 2015. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump.
Weakness: CWE-200
Which versions are affected by CVE-2015-6556?
It affects 1 product.
Products include Symantec Endpoint Encryption.
How do I fix CVE-2015-6556?
No fix has been published for CVE-2015-6556 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-6556 being exploited?
There is no known exploitation of CVE-2015-6556 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2019-9702 Privilege escalation in Endpoint Encryption
- CVE-2019-9703 Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that
- CVE-2019-9694 Privilege escalation in Symantec Endpoint Encryption
- CVE-2015-8156 Privilege escalation in n/a
- CVE-2017-15526 Null dereference in Symantec Endpoint Encryption
Sources
Also known as GHSA-2j2x-m8gc-xcrm.