Description
Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected products
- Symantec / endpoint_protection11.0.6000 – 11.0.6000
- Symantec / endpoint_protection11.0.6100 – 11.0.6100
- Symantec / endpoint_protection11.0.6200 – 11.0.6200
- Symantec / endpoint_protection11.0.6200.754 – 11.0.6200.754
- Symantec / endpoint_protection11.0.6300 – 11.0.6300
References
- MISChttp://securitytracker.com/id?1025919
- MISChttp://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00
- VENDOR_ADVISORYhttp://secunia.com/advisories/43662
- MISChttp://www.securityfocus.com/bid/49101
- MISChttp://www.osvdb.org/74467
Updated 14m ago · 8 sources