3.3

CVE-2012-3581

Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Messaging Gateway Version <= 9.5.4
Symantec ≫ Messaging Gateway Version 9.5
Symantec ≫ Messaging Gateway Version 9.5.1
Symantec ≫ Messaging Gateway Version 9.5.2
Symantec ≫ Messaging Gateway Version 9.5.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.457
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
Vendor Advisory
http://www.securityfocus.com/bid/55142