CVE-2015-1485

Description

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

References

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00

http://www.securitytracker.com/id/1032710

http://www.securityfocus.com/bid/75289

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS