PT-2016-3862
CVE-2015-8152
·
تاريخ النشر
2016-03-18
·
تاريخ التحديث
2016-12-03
الوصف من
CVSS 2.0
8.5
عاليةالمقاييسAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Symantec Endpoint Protection Manager version 12.1 before RU6-MP4
Description
A cross-site request forgery issue allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by modifying a logging script.
Recommendations
For Symantec Endpoint Protection Manager version 12.1 before RU6-MP4, update to RU6-MP4 or later to resolve the issue. As a temporary workaround, consider restricting access to the logging script to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾