What is CVE-2016-5306?

CVE-2016-5306 is a medium-severity vulnerability in Symantec Endpoint_protection_manager, classified under Information Disclosure. CVSS score: 5.3/10. Published 2016-06-30.

How severe is CVE-2016-5306?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Symantec Endpoint_protection_manager

CVE-2016-5306

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HT…

Vulnerability class: Information Disclosure

EPSS: 0.003 (57.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Symantec Endpoint_protection_manager
N/a — versions n/a

Weakness classification (CWE)

References

secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
1036196 (vdb-entry, x_refsource_SECTRACK)
91449 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-5306?: CVE-2016-5306 is a medium-severity vulnerability in Symantec Endpoint_protection_manager, classified under Information Disclosure. CVSS score: 5.3/10. Published 2016-06-30.
How severe is CVE-2016-5306?: Medium severity. CVSS v3 base score is 5.3 out of 10.