CSRF Vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4

CVE-2015-8152 · HIGH Severity

AV:N/AC:M/AU:S/C:C/I:C/A:C

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.

Learn more about our User Device Pen Test.