vulnerability

Symantec Endpoint Protection Manager: CVE-2016-5306: Strict transport security not enforced on port 8445

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:N/AC:L/Au:N/C:P/I:N/A:N)	06/30/2016	04/25/2017	10/30/2017

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

06/30/2016

Added

04/25/2017

Modified

10/30/2017

Description

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445.

Solution

endpoint_protection_manager-cve-2016-5306

References

BID-91449
CVE-2016-5306
https://attackerkb.com/topics/CVE-2016-5306
URL-http://www.securityfocus.com/bid/91449
URL-https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today