4
CVE-2014-1643
- EPSS 0.75%
- Veröffentlicht 07.02.2014 04:52:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
LoginThe Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Encryption Management Server Version <= 3.3.1
Symantec ≫ Encryption Management Server Version 3.3.0
Symantec ≫ Encryption Management Server Version 3.3.0 Update mp1
Symantec ≫ Encryption Management Server Version 3.3.0 Update mp2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.75% | 0.5 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
http://www.securityfocus.com/bid/65300
http://www.securitytracker.com/id/1029729
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140205_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90946