Skip to content
OpenAdvisories
Unscored CVE-2020-12595 EUVD-2020-4897GHSA-427q-fqw6-mhwm

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup serve…

Published Dec 10, 2020 · Updated Aug 4, 2024 · Assigned by symantec

Description

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

Affected products

VendorProductAffectedFixed
— Symantec Messaging Gateway (SMG) SMG prior to 10.7.4 —

References