Vulnerability Details CVE-2016-3651
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.1%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 6.0
References
- http://www.securityfocus.com/bid/91445
- http://www.securitytracker.com/id/1036196
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
- http://www.securityfocus.com/bid/91445
- http://www.securitytracker.com/id/1036196
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
Products affected by CVE-2016-3651
-
cpe:2.3:a:symantec:endpoint_protection_manager:12.1.6