CVE-2016-3653

published 2016-06-30

CVE-2016-3653: Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow…

high 8 CVSS 3.0

AV N AC L PR L UI R S U C H I H A H

EXPLOIT

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection_manager	<= 12.1.6	—

CWE-352