CVE-2016-2203 The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
HighCVSS 7.8
EPSS 7.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec messaging gateway | = 10.6.0-patch3 | No fix listed |
| symantec messaging gateway | = 10.6.0-patch5 | No fix listed |
| symantec messaging gateway | = 10.6.0-patch7 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 86137 exploit third-party-advisory vdb-entry
- 1035609 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory
- 39715 exploit third-party-advisory vdb-entry