CVE-2017-6330 - Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of ser

CVE-2017-6330

Summary

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."

References

http://www.securityfocus.com/bid/100552
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00

Vulnerable Configurations

cpe:2.3:a:symantec:encryption_desktop:10.3.2:mp1:*:*:professional:*:*:*
cpe:2.3:a:symantec:encryption_desktop:10.3.2:mp1:*:*:professional:*:*:*
cpe:2.3:a:symantec:encryption_desktop:10.4.1:mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:encryption_desktop:10.4.1:mp1:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:N/A:P

refmap via4

bid	100552
confirm	https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00

Last major update

03-10-2019 - 00:03

Published

13-09-2017 - 14:29

Last modified

03-10-2019 - 00:03