Symantec Endpoint Protection Elevated Privilege Vulnerabilities

Multiple vulnerabilities have been identified in Symantec Endpoint Protection, which can be exploited by local user obtain elevated privileges on the vulnerable system.

1. A local user can exploit an authentication flaw in the Management Console to gain the privileges of another user.
2. A local user can bypass custom Application/Device Control (ADC) policies to access directories and files on the target system.
3. A local user can exploit an unquoted search path to execute arbitrary code with elevated privileges.