CVE-2019-12753

N/A

Description

An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The malicious administrator user can also obtain the passwords of other Reporter web UI users.

CVE Details

CVSS v3.1 ScoreN/A

Published8/30/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

symantec:reporter

References

https://support.symantec.com/us/en/article.SYMSA1489.html(secure@symantec.com)

https://support.symantec.com/us/en/article.SYMSA1489.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.