Vulnerability · Published Jul 8, 2020 · Assigned by symantec
CVE-2020-5839
High 7.5
In plain English
A high-severity security flaw in Symantec Endpoint Detection And Response. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.0%top 19.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Symantec Endpoint Detection And Response | Prior to 4.4 |