CVE-2014-1643 in Encryption Management Server

Resumen (Inglés)

The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-01-23

Divulgación

2014-02-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
12226	Symantec Encryption Management Server Web Email Protection escalada de privilegios	264	No probado	Arreglo oficial	CVE-2014-1643

Fuentes

• MITRE
• NVD
• CVE Details