Skip to content
Sign in
Not rated

CVE-2020-12595 An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a…

Description

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

Affected products and versions

Product Affected versions Fixed in
Symantec Messaging Gateway (SMG) Versions not published

Other CVEs of Symantec Messaging Gateway (SMG)

The 3 CVEs of Symantec Messaging Gateway (SMG) →
CVE-2021-30651 A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that… Not rated CVE-2020-12594 A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the… Not rated
Track this CVE