Exploitation attempts of\nthese vulnerabilities requires access to the SEP Management console. This network consists of telemetry data coming from 175 million endpoints and 57 millionattack sensors in 175 countries, providing unique visibility into the latest security threats. Clients connect to the server to get the\nlatest policies, security settings, and software updates.\n\n\nVulnerability Type(s):\n=\nMultiple Cross Site Scripting (XSS)\nCross Site Request Forgeries (CSRF)\nOpen Redirect\n\n\nCVE Reference(s):\n=\nCVE-2016-3652 / XSS\nCVE-2016-3653 / CSRF\nCVE-2016-5304 / Open Redirect\n\n\nVulnerability Details:\n=\n\nThe management console for SEPM contains a number of security\nvulnerabilities that could be used by a lower-privileged user or by\nan unauthorized user to elevate privilege or gain access to unauthorized\ninformation on the management server. Symantec Endpoint Protection leverages the worlds largest civilian threat intelligence network to deliver advancedprotection at the endpoint. The policies functionality is\nthe heart of the Symantec software. It handles security policy\nenforcement, host integrity checking (Symantec Network Access Control only),\nand automated remediation over all clients. Release notes About this document Whats new in Symantec Endpoint Protection 12.1. , "cvelist":, "modified": "T00:00:00", "id": "EXPLOITPACK:EE60D4F0565AF3FA95BA52BFBBF411BE", "href": "", "sourceData": " Credits: John Page aka HYP3RLINX\n\n Website: \n\n Source:\n\n\n ISR: ApparitionSec\n\n\nVendor:\n=\nEndpoint Protection Manager and client v12.1\n\nSEPM provides a centrally managed solution. Table 1-7 Comparison of scan performance between versions 14.x and 12.1.6.x (time) Standard Standard (14.x) Embedded Dark network (12.1.6. Posted OctoSymantec Endpoint Protection 12.1.6 MP9 Description Click Download Files to download this PDF file.
0 kommentar(er)
