CVE-2016-5306: Infoleak
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5306?
CVE-2016-5306 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2016-5306?
To fix CVE-2016-5306, upgrade Symantec Endpoint Protection Manager to version 12.1 RU6 MP5 or later.
What is the impact of CVE-2016-5306?
The impact of CVE-2016-5306 allows remote attackers to intercept unintended HTTP traffic and potentially access sensitive information.
Which versions of Symantec Endpoint Protection are affected by CVE-2016-5306?
CVE-2016-5306 affects Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5.
Does CVE-2016-5306 allow remote attacks?
Yes, CVE-2016-5306 makes it easier for remote attackers to obtain information by sniffing the network traffic.