CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
61.5%
The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
Vendor | Product | Version | CPE |
---|---|---|---|
symantec | encryption_management_server | * | cpe:2.3:a:symantec:encryption_management_server:*:*:*:*:*:*:*:* |
symantec | encryption_management_server | 3.3.0 | cpe:2.3:a:symantec:encryption_management_server:3.3.0:*:*:*:*:*:*:* |
symantec | encryption_management_server | 3.3.0 | cpe:2.3:a:symantec:encryption_management_server:3.3.0:mp1:*:*:*:*:*:* |
symantec | encryption_management_server | 3.3.0 | cpe:2.3:a:symantec:encryption_management_server:3.3.0:mp2:*:*:*:*:*:* |