CVE-2020-12595

2020-12-1005:21:49

symantec

www.cve.org

information disclosure

smg

web ui

password

remote scp backup server

authenticated

privileged user

cve-2020-12595

AI Score

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

CNA Affected

[
  {
    "product": "Symantec Messaging Gateway (SMG)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "SMG prior to 10.7.4"
      }
    ]
  }
]