CVE-2016-9092
high
CVSS v3
8.8
CVSS v2
6.8
VIR risk
8.8
Description
The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user.
Predictions
Exploit likelihood
92%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secure@symantec.com — https://www.symantec.com/security-center/network-protection-security-advisories/SA149
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| symantec | content_analysis | 1.3 | |
| symantec | content_analysis | 2.1 | |
| symantec | mail_threat_defense | 1.1 | |
References
CWEs
CWE-352
Verify integrity in audit chain (admin only). AS-IS.