SEP/SES/LUA and vulnerability CVE-2024-22243

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

Is Symantec Endpoint Protection Manager (SEPM), Symantec Endpoint Protection Client (SEP), Symantec Endpoint Security (SES), or LiveUpdate Administrator (LUA) affected by the vulnerability CVE-2024-22243 in the Spring-core Framework?

Resolution

• Symantec Endpoint Protection Manager (SEPM) - Does not utilize the Spring-core Framework component that is vulnerable. Not vulnerable.
• Symantec Endpoint Protection Client (SEP) - Does not utilize the Spring-core Framework component that is vulnerable. Not vulnerable.
• Symantec Endpoint Security (SES) - Does not utilize the Spring-core Framework component that is vulnerable. Not vulnerable.
• LiveUpdate Administrator (LUA) - Does not utilize the Spring-core Framework component that is vulnerable. Not vulnerable.