Description (CNA)
A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Symantec Management Center (MC) | affected MC prior to 2.4.1.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.