CVE-2020-5837

7.8 highEPSS 0.7%

High (7.8) in symantec endpoint protection. EPSS 0.7% chance of exploitation in the next 30 days.

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2020-05-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:endpoint_protection

References

https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762

Check your stack JSON