CVE-2016-5304: Medium severity symantec endpoint protection vulnerability
Published Jun 30, 2016
·Updated
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
1 affected component
Symantec Endpoint Protection Manager<=12.1.6
Event History
Jun 30, 2016
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5304?
CVE-2016-5304 is rated as a medium severity vulnerability.
2
How do I fix CVE-2016-5304?
To fix CVE-2016-5304, upgrade to Symantec Endpoint Protection Manager version 12.1 RU6 MP5 or later.
3
Who is affected by CVE-2016-5304?
CVE-2016-5304 affects remote authenticated users on Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5.
4
What type of vulnerability is CVE-2016-5304?
CVE-2016-5304 is an open redirect vulnerability allowing unauthorized redirection of users.
5
What can attackers do with CVE-2016-5304?
Attackers can exploit CVE-2016-5304 to redirect users to arbitrary websites, facilitating phishing attacks.