CVE-2018-12237

Name of the Vulnerable Software and Affected Versions Symantec Reporter CLI versions 10.1 prior to 10.1.5.6 Symantec Reporter CLI versions 10.2 prior to 10.2.1.8

Description The issue allows an authenticated malicious administrator with Enable mode access to execute arbitrary OS commands with elevated system privileges due to an OS command injection vulnerability.

Recommendations For Symantec Reporter CLI versions 10.1 prior to 10.1.5.6, update to version 10.1.5.6 or later. For Symantec Reporter CLI versions 10.2 prior to 10.2.1.8, update to version 10.2.1.8 or later.