vulnerability

Symantec Endpoint Protection Manager: CVE-2016-3649: Sysadmin authenticated listing disclosure

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:L/Au:S/C:P/I:N/A:N)	Jun 30, 2016	Apr 25, 2017	Oct 30, 2017

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Jun 30, 2016

Added

Apr 25, 2017

Modified

Oct 30, 2017

Description

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests.

Solution

endpoint_protection_manager-cve-2016-3649

References

BID-91440
CVE-2016-3649
https://attackerkb.com/topics/CVE-2016-3649
URL-http://www.securityfocus.com/bid/91440
URL-https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today