Vulnerability Details CVE-2016-2203
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.379
EPSS Ranking 97.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 2.1
References
- http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html
- http://www.securityfocus.com/bid/86137
- http://www.securitytracker.com/id/1035609
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00
- https://www.exploit-db.com/exploits/39715/
- http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html
- http://www.securityfocus.com/bid/86137
- http://www.securitytracker.com/id/1035609
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00
- https://www.exploit-db.com/exploits/39715/
Products affected by CVE-2016-2203
-
cpe:2.3:a:symantec:messaging_gateway:10.6.0