CVE-2018-5240

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Metrics

CVSS 3.0 8.0/10CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Symantec Corporation	Inventory Plugin for Symantec Management Agent	Prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7

References

http://www.securityfocus.com/bid/104753Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041654Third Party Advisory
https://support.symantec.com/en_US/article.SYMSA1456.htmlMitigation, Vendor Advisory
http://www.securityfocus.com/bid/104753Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041654Third Party Advisory
https://support.symantec.com/en_US/article.SYMSA1456.htmlMitigation, Vendor Advisory

Timeline

Published: Jul 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-52419.8Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerabil CVE-2018-52426.2Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the u CVE-2018-52437.5The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploi CVE-2018-52446.5In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking s CVE-2018-52466.5In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.CVE-2018-52476.5In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.CVE-2018-52488.8In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_d CVE-2018-52496.1Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via CVE-2018-52516.5In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c CVE-2018-52525.3libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.CVE-2018-52537.8The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling.CVE-2018-52547.5Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDA