CVE-2019-18376

Broadcom Management Center (MC) Web UI vulnerability CVE-2019-18376: CSRF token disclosure allows an attacker who can access an authenticated MC user’s browser history or traffic to obtain CSRF tokens and perform CSRF attacks against MC. Affected versions per Symantec/SNMC entries include MC 2.2,...

CVE-2019-9697

CVE-2019-9697 affects the Symantec/Norton Management Center REST API (MC) versions 2.0, 2.1, and 2.2 prior to 2.2.2.1. A malicious authenticated user can leverage the MC REST API to obtain passwords for external backup and CPL policy import servers, exposing sensitive credentials that they would ...