CVE-2020-12595

creationtimestamp| type| source ---|---|--- 2020-12-10 12:33:49+00:00| seen| https://t.me/cibsecurity/18722 2020-12-10 12:41:12+00:00| seen| https://t.me/cibsecurity/18742 2020-12-10 13:25:27+00:00| seen| https://t.me/cibsecurity/18762 2020-12-10 14:03:18+00:00| seen| https://t.me/cibsecurity/187...

CVE-2020-12595

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...

CVE-2020-12595

CVE-2020-12595 concerns Symantec Messaging Gateway (SMG). The vulnerability is an information disclosure in which a malicious, authenticated, privileged web UI user can obtain the password for a remote SCP backup server they would not normally access. Affects SMG before version 10.7.4. Connected ...

Privilege Escalation and Information Disclosure Vulnerabilities in SMG

Summary Symantec Messaging Gateway SMG is susceptible to privilege escalation and information disclosure vulnerabilities. A malicious, authenticated, privileged user can further elevate their privileges on the system, or obtain a password for a remote SCP backup server that they might not otherwi...