CVE-2014-1643

EPSS 0.12%
Veröffentlicht 07.02.2014 04:52:04
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@symantec.com
Teams Watchlist Login
Unerledigt Login

The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Encryption Management Server Version <= 3.3.1

Symantec ≫ Encryption Management Server Version3.3.0

Symantec ≫ Encryption Management Server Version3.3.0 Updatemp1

Symantec ≫ Encryption Management Server Version3.3.0 Updatemp2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.284

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

http://www.securityfocus.com/bid/65300

http://www.securitytracker.com/id/1029729

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140205_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/90946

https://nvd.nist.gov/vuln/detail/CVE-2014-1643

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-1643

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-1643

EUVD