CVE-2016-3650 (endpoint_protection_manager)

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack.

Source: CVE-2016-3650 (endpoint_protection_manager)