CVE-2015-8152

Publication date

2016-03-18 14:00:00

Family

symantec

State

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.