4 matches found
CVE-2020-12593
CVE-2020-12593 CVE-2020-12593 概念验证 Symantec EDR 本地部署版本(低于"4.5")存在信息泄露漏洞,可通过以下URL利用: root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562...
CVE-2020-5839
CVE-2020-5839 CVE-2020-5839 POC 早于 "4.4.0" 版本的 Symantec EDR 本地部署版存在信息泄露漏洞,可通过以下 URL 访问: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds https://@IPEDR/atpapp/features/list 参考...
CVE-2019-19547
CVE-2019-19547 CVE-2019-19547 POC Symantec EDR 本地部署版(版本低于 "4.3.0")存在无需认证的反射型 XSS 漏洞,可通过以下 URL 触发: root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log 参考 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-and-Response-XSS/SYMSA1502...