CVE-2016-3648

published 2016-06-30

CVE-2016-3648: Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and…

high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force password-guessing attacks against management-console accounts, by entering data into the authorization window.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection_manager	<= 12.1.6	—

CWE-200 CWE-254