Intrusion PreventionSymantec.Endpoint.Protection.Manager.Reports.Open.Redirect
Description
This indicates an attack attempt to exploit an Open Redirect vulnerability in Symantec Endpoint Protection Manager (SEPM).
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker can exploit this by tricking an unsuspecting user into opening an crafted URL, leading to further attacks.
Affected Products
Symantec Endpoint Protection Manager and client 12.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor's advisory for updates:
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42668 |
| Created | Jul 06, 2016 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2016-5304 |
| Exploit Prediction Score | 1.0% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |