vulnerability

Symantec Endpoint Protection Manager: CVE-2016-5304: Open Redirect in external URL .php script

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:P/I:P/A:N)

Published

Jun 30, 2016

Added

Apr 25, 2017

Modified

Oct 30, 2017

Description

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Solution

endpoint_protection_manager-cve-2016-5304

References

BID-91447
CVE-2016-5304
https://attackerkb.com/topics/CVE-2016-5304
http://www.securityfocus.com/bid/91447
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report