CVE Database
/

CVE-2022-37017

Back to search

CVE-2022-37017

Published: Dec 1, 2022

Modified: Apr 24, 2025

PUBLISHED

Description

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

VendorProductVersions

n/a

Symantec Endpoint Protection

affected
14.3 RU5

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now