An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NBroadcom Symantec Messaging Gateway
APPBroadcom< 10.7.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2024-23614CRITICAL10.0PL ✓ten sam produkt
Buffer overflow w Broadcom Symantec Messaging Gateway umożliwiający RCE jako root
CVE-2024-23615CRITICAL10.0PL ✓ten sam produkt
Buffer overflow w Broadcom Symantec Messaging Gateway umożliwiający RCE jako root
CVE-2014-0160HIGH7.5⚠ KEVten sam produkt
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Exten...
CVE-2020-12594HIGH7.2ten sam produkt
A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privilege...
CVE-2021-30651MEDIUM4.9ten sam produkt
A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory serve...