Design/Logic Flaw

2022-06-2415:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.

CPENameOperatorVersion
symantec_messaging_gatewayge10.7
symantec_messaging_gatewaylt10.7.5

CPE	Name	Operator	Version
	symantec_messaging_gateway	ge	10.7
	symantec_messaging_gateway	lt	10.7.5

References

support.broadcom.com/external/content/SecurityAdvisories/0/20652