CVE-2018-12237
High
Description
The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges.
SeverityHigh
CVSS7.2
Exploit probability—
ProductSymantec Reporter
PublishedJan 24, 2019
First seenJan 24, 2019
How to fix
Update
- symantec reporter10.1.5.6, 10.2.1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec reporter | 10.1 ≤ v < 10.1.5.6, 10.2 ≤ v < 10.2.1.8 | 10.1.5.6, 10.2.1.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.