CVE-2021-30651

2022-06-2415:00:11

symantec

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.

CNA Affected

[
  {
    "product": "Symantec Messaging Gateway (SMG)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "10.7"
      }
    ]
  }
]

References

support.broadcom.com/external/content/SecurityAdvisories/0/20652