CVE-2014-1643 The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arb...
MediumCVSS 4.0
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec encryption management server | <= 3.3.1 | No fix listed |
| symantec encryption management server | = 3.3.0 | No fix listed |
| symantec encryption management server | = 3.3.0-mp1 | No fix listed |
| symantec encryption management server | = 3.3.0-mp2 | No fix listed |
References
- 65300 vdb-entry
- 1029729 vdb-entry
- www.symantec.com vendor-advisory
- symantec-cve20141643-info-disc(90946) vdb-entry