CVE-2015-8152

High

Published: 18/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8152 is a CSRF vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 that allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.

Risk Assessment

Organizations may be exposed to unauthorized actions that could lead to the execution of malicious code on the system, jeopardizing the integrity and security of data.

Recommendation

It is recommended to update Symantec Endpoint Protection Manager to version RU6-MP4 or later to mitigate this vulnerability and implement additional security measures against CSRF attacks.

Other vulnerabilities in Symantec Endpoint Protection Manager (SEPM) 12.1 przed RU6-MP4

CVE-2015-8153High
CVE-2015-8153 is an SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.