Information disclosure

2020-12-1006:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

CPENameOperatorVersion
symantec_messaging_gatewaylt10.7.4

CPE	Name	Operator	Version
	symantec_messaging_gateway	lt	10.7.4

References

support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609