VULNERABILITY INTELLIGENCE
CVE-2016-5306
CVSS score5.3 MEDIUM
EPSS probability2.08%
CISA KEVNot currently listed
Published2016-06-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor