CVE-2020-12594

CVE-2020-12594 affects Symantec Messaging Gateway (SMG) appliances prior to version 10.7.4. The issue is a privilege-escalation vulnerability: an authenticated, privileged CLI user can elevate privileges to gain full control over the SMG system. Affected component/condition: CLI access within SMG...

CVE-2020-12595

CVE-2020-12595 concerns Symantec Messaging Gateway (SMG). The vulnerability is an information disclosure in which a malicious, authenticated, privileged web UI user can obtain the password for a remote SCP backup server they would not normally access. Affects SMG before version 10.7.4. Connected ...