CVE-2015-1485

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

🔗 References (6)

• secure@symantechttp://www.securityfocus.com/bid/75289
• secure@symantechttp://www.securitytracker.com/id/1032710
• secure@symantechttp://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/75289
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1032710
• af854a3a-2127-422b-91ae-364da2661108http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00