CVE-2012-3582 Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circu...
LowCVSS 2.9
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec pgp universal server | = 3.2.0 | No fix listed |
| symantec pgp universal server | = 3.2.1 | No fix listed |
References
- 55246 vdb-entry
- 1027467 vdb-entry
- www.symantec.com vendor-advisory