VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 28, 2015· Updated Jun 17, 2026

CVE-2015-1485

CVE-2015-1485

Description

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

Affected products

2
  • Symantec/Data Loss Prevention2 versions
    cpe:2.3:a:symantec:data_loss_prevention:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:data_loss_prevention:*:*:*:*:*:*:*:*range: <=12.5.1
    • (no CPE)range: <12.5.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.