CVE-2015-1491: SQL Injection

Published Aug 1, 2015

Updated

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected Software

1 affected component

Symantec Endpoint Protection Manager=12.1.0

Event History

Aug 1, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1491?

CVE-2015-1491 is classified as a medium severity vulnerability due to its potential for SQL injection by remote authenticated users.

How do I fix CVE-2015-1491?

To fix CVE-2015-1491, update Symantec Endpoint Protection Manager to version 12.1-RU6-MP1 or later.

Who is affected by CVE-2015-1491?

CVE-2015-1491 affects managed systems running Symantec Endpoint Protection Manager version 12.1.0 prior to update RU6-MP1.

What type of vulnerability is CVE-2015-1491?

CVE-2015-1491 is an SQL injection vulnerability that allows remote authenticated users to execute arbitrary SQL commands.

Can CVE-2015-1491 lead to data breaches?

Yes, CVE-2015-1491 can potentially lead to data breaches if exploited, as it allows unauthorized access to the database.