CVE-2016-5306

CVE-2016-5306 affects Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5. The vulnerability is an information disclosure caused by failure to enable HTTP Strict Transport Security on port 8445, enabling remote observers to sniff HTTP traffic and obtain sensitive data. Affected produc...

CVE-2016-5307

Summary: CVE-2016-5307 is a directory traversal vulnerability in the Symantec Endpoint Protection Manager (SEPM) management console, affecting SEPM 12.1 installations prior to 12.1 RU6 MP5. The issue permits remote authenticated users to read arbitrary files within the web-root directory tree via...

CVE-2016-5306

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445...

CVE-2016-3653

CVE-2016-3653 is a CSRF vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 prior to RU6 MP5. A remote, authenticated attacker can exploit weaknesses in management scripts to hijack the authentication of arbitrary users. The issue is documented across multiple sources (NVD entry and...

Symantec Endpoint Protection Manager and Client Design Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. The software provides security across physical and virtual systems.SEP Manager and Client are the management and client software. A design flaw exists in the management console of Symantec Endpoint...

Symantec Endpoint Protection Manager Cross-Site Request Forgery Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A cross-site request forgery vulnerability exists in SEPM version 12.1. An attacker coul...

CVE-2016-5306: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445...

CVE-2016-3649: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests...

CVE-2016-5305: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack...

CVE-2016-3647: Undefined Security Weakness

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery SSRF attacks, and trigger network traffic to arbitrary intranet hosts, via a crafted request...

CVE-2016-3648: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force password-guessing attacks against management-console accounts, by entering data into the authorization window...

CVE-2016-3653: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users...

CVE-2016-5307: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors...

CVE-2016-3652: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3650: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack...

CVE-2016-3651: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors...

PT-2016-6360

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 before RU6 MP5 Description A directory traversal issue allows remote authenticated users to read arbitrary files in the web-root directory tree. Recommendations For Symantec Endpoint...

PT-2016-6357

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue concerns an open redirect vulnerability in a report-routing component. This vulnerability allows remote authenticated users to redirect users to arbitrar...

PT-2016-6358

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in management scripts. These vulnerabilities allow remote authenticated users to inject...

PT-2016-5633

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1 before RU6 MP5 Description The issue allows remote authenticated users to conduct server-side request forgery SSRF attacks. This enables triggering network traffic to arbitrary intranet hosts...