CVEvulnerability
CVE-2011-0551
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected configurations
• symantec endpoint protection 11.0.6000
• symantec endpoint protection 11.0.6100
• symantec endpoint protection 11.0.6200
• symantec endpoint protection 11.0.6200.754
• symantec endpoint protection 11.0.6300
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/43662 Vendor Advisory
- http://securitytracker.com/id?1025919 securitytracker.com
- http://www.osvdb.org/74467 www.osvdb.org
- http://www.securityfocus.com/bid/49101 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 www.symantec.com
- http://secunia.com/advisories/43662 Vendor Advisory
- http://securitytracker.com/id?1025919 securitytracker.com
- http://www.osvdb.org/74467 www.osvdb.org
- http://www.securityfocus.com/bid/49101 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 www.symantec.com