VULNERABILITY INTELLIGENCE
CVE-2015-8801
CVSS score2.9 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2016-06-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Description
Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.
Weakness classification
- CWE-284: Improper Access Control