symantec endpoint protection manager 12.1.6 to 14

Exploitation attempts of these vulnerabilities requires access to the SEP Management console. Clients connect to the server to get the latest policies, security settings, and software updates. Vulnerability Type(s): = Multiple Cross Site Scripting (XSS) Cross Site Request Forgeries (CSRF) Open Redirect CVE Reference(s): = CVE-2016-3652 / XSS CVE-2016-3653 / CSRF CVE-2016-5304 / Open Redirect Vulnerability Details: = The management console for SEPM contains a number of security vulnerabilities that could be used by a lower-privileged user or by an unauthorized user to elevate privilege or gain access to unauthorized information on the management server.

The policies functionality is the heart of the Symantec software. It handles security policy enforcement, host integrity checking (Symantec Network Access Control only), and automated remediation over all clients. This information is specific to upgrading the software in environments where a compatible version of the product is already installed. Use this topic to upgrade to the latest release of SEP and take advantage of the new features.

, 'cvelist':, 'modified': 'T00:00:00', 'id': 'EXPLOITPACK:EE60D4F0565AF3FA95BA52BFBBF411BE', 'href': '', 'sourceData': ' Credits: John Page aka HYP3RLINX Website: Source: ISR: ApparitionSec Vendor: = Endpoint Protection Manager and client v12.1 SEPM provides a centrally managed solution. Update to the latest release of Symantec Endpoint Protection Manager and the clients.

Symantec endpoint protection manager 12.1.6 to 14