CVE-2016-9092 - Vulnerability Details - OpenCVE

The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00243.

Key SSVC decision points have not yet been added.

Vendors	Products
Symantec	Content Analysis Mail Threat Defense

Configuration 1 [-]

OR	cpe:2.3:a:symantec:content_analysis:1.3:::::::*
	cpe:2.3:a:symantec:content_analysis:2.1:::::::*
	cpe:2.3:a:symantec:mail_threat_defense:1.1:::::::*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://www.securityfocus.com/bid/104182
https://www.symantec.com/security-center/network-protection-security-advisories/SA149

History

No history.

MITRE

Status: PUBLISHED

Assigner: symantec

Published: 2017-05-11T14:01:00Z

Updated: 2024-09-17T03:02:49.547Z

Reserved: 2016-10-28T00:00:00

Link: CVE-2016-9092

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2017-05-11T14:30:16.283

Modified: 2025-04-20T01:37:25.860

Link: CVE-2016-9092

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Content Analysis (CA)", "vendor": "Symantec Corporation", "versions": [{"status": "affected", "version": "1.3"}, {"status": "affected", "version": "2.x prior to 2.2.1.1"}]}, {"product": "Mail Threat Defense (MTD)", "vendor": "Symantec Corporation", "versions": [{"status": "affected", "version": "1.1"}]}], "datePublic": "2018-05-17T00:00:00", "descriptions": [{"lang": "en", "value": "The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user."}], "problemTypes": [{"descriptions": [{"description": "Cross-site request forgery", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-24T09:57:01", "orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "shortName": "symantec"}, "references": [{"name": "104182", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/104182"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@symantec.com", "DATE_PUBLIC": "2018-05-17T00:00:00", "ID": "CVE-2016-9092", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Content Analysis (CA)", "version": {"version_data": [{"version_value": "1.3"}, {"version_value": "2.x prior to 2.2.1.1"}]}}, {"product_name": "Mail Threat Defense (MTD)", "version": {"version_data": [{"version_value": "1.1"}]}}]}, "vendor_name": "Symantec Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Cross-site request forgery"}]}]}, "references": {"reference_data": [{"name": "104182", "refsource": "BID", "url": "http://www.securityfocus.com/bid/104182"}, {"name": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149", "refsource": "CONFIRM", "url": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:42:10.913Z"}, "title": "CVE Program Container", "references": [{"name": "104182", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/104182"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149"}]}]}, "cveMetadata": {"assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5", "assignerShortName": "symantec", "cveId": "CVE-2016-9092", "datePublished": "2017-05-11T14:01:00Z", "dateReserved": "2016-10-28T00:00:00", "dateUpdated": "2024-09-17T03:02:49.547Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:symantec:content_analysis:1.3:*:*:*:*:*:*:*", "matchCriteriaId": "264A2B3C-B8AD-4553-B7B5-A0EBBA657296", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:content_analysis:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "CAA6658A-95D2-4D51-9ABA-F619854F8FE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:mail_threat_defense:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "493BC508-B9D5-461D-B616-DE57018E62F6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user."}, {"lang": "es", "value": "Las consolas de administraci\u00f3n Content Analysis (CA) versiones 1.3, 2.x anteriores a 2.2.1.1 y Mail Threat Defense (MTD) versi\u00f3n 1.1 de Symantec, son susceptibles a una vulnerabilidad de tipo cross-site request forging (CSRF). Un atacante remoto puede usar phishing u otras t\u00e9cnicas de ingenier\u00eda social para acceder a la consola de administraci\u00f3n con los privilegios de un usuario administrador autenticado."}], "id": "CVE-2016-9092", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-05-11T14:30:16.283", "references": [{"source": "secure@symantec.com", "url": "http://www.securityfocus.com/bid/104182"}, {"source": "secure@symantec.com", "tags": ["Vendor Advisory"], "url": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/104182"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.symantec.com/security-center/network-protection-security-advisories/SA149"}], "sourceIdentifier": "secure@symantec.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}