CVE-2020-5837

Publication date

2020-05-11 19:25:45

Family

symantec

State

PUBLISHED

Description

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.