Security Advisory
CVE-2015-1486
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.