CVE-2019-18376

2020-04-0923:11:48

symantec

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user’s web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC.

CNA Affected

[
  {
    "product": "Symantec Management Center (MC)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MC prior to 2.4.1.1"
      }
    ]
  }
]