CVE-2015-8152

published 2016-03-18

CVE-2015-8152: Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack…

high 8 CVSS 3.0

AV N AC L PR L UI R S U C H I H A H

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection_manager	<= 12.1	—

CWE-352