CVE:CVE-2019-12759
CNNVD:CNNVD-201911-1001
Symantec Endpoint Protection Manager（SEPM）和Symantec Mail Security for MS Exchange都是美国赛门铁克（Symantec）公司的产品。Symantec Endpoint Protection Manager是一套企业级病毒防护软件。该软件可防范恶意攻击，如病毒、蠕虫、特洛伊木马等。Symantec Mail Security for MS Exchange是一套用于Microsoft Exchange Server邮件服务器的邮件安全网关产品。
Symantec Endpoint Protection Manager 14.2 RU2之前版本和Symantec Mail Security for MS Exchange 7.5.x之前版本中存在安全漏洞。攻击者可利用该漏洞提升权限。
solution:Upgrade symantec endpoint_protection_manager to a higher version than 14.2,14.2:ru1,and avoid the version (,14.2],14.2:ru1; Upgrade symantec mail_security to a higher version than 7.5,and avoid the version (,7.5)