CVE-2020-12595

2020-12-1005:21:49

symantec

www.cve.org

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

CNA Affected

[
  {
    "product": "Symantec Messaging Gateway (SMG)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "SMG prior to 10.7.4"
      }
    ]
  }
]