CVE-2020-5834 Path traversal in Symantec Endpoint Protection Manager

What is CVE-2020-5834?

CVE-2020-5834 is a medium-severity path traversal vulnerability in Symantec Endpoint Protection Manager, published on 11 May 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory.

Weakness: CWE-22

Which versions are affected by CVE-2020-5834?

It affects 1 product.

Products include Symantec Endpoint Protection Manager.

How do I fix CVE-2020-5834?

No fix has been published for CVE-2020-5834 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2020-5834 being exploited?

There is no known exploitation of CVE-2020-5834 in the wild and no public exploit code.

Other vulnerabilities in Symantec Endpoint Protection Manager

• CVE-2016-3648 Security feature bypass in n/a High 8.8
• CVE-2016-3650 Information disclosure in n/a High 8.8
• CVE-2015-8153 SQL injection in n/a High 8.8
• CVE-2015-8154 Privilege escalation in n/a High 8.8
• CVE-2015-6555 Code injection in n/a High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rg8c-w227-4wq4.