CVE-2019-18374

Published: Nov 25, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls.

Affected (3)

Products: Broadcom: Symantec Critical System Protection

Broadcom

1 product

Symantec Critical System Protection

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Symantec Critical System Protection	Version 8.0.0
Broadcom Symantec Critical System Protection	Version 8.0.0 hotfix1
Broadcom Symantec Critical System Protection	Version 8.0.0 mp1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://support.symantec.com/us/en/article.SYMSA1498.html

Source: secure@symantec.com

Vendor Advisory

https://support.symantec.com/us/en/article.SYMSA1498.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.