CVE-2015-8148 — Sensitive Information Exposure in Encryption Management Server

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 36.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Encryption Management Server
Timeline
PublishedFeb 18
Latest updateMay 17

Description

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xgxc-3m22-3xcf: The LDAP service in Symantec Encryption Management Server (SEMS) 3↗2022-05-17
▶
CVEList
CVE-2015-8148: The LDAP service in Symantec Encryption Management Server (SEMS) 3↗2016-02-18
▶
CVE-2015-8148 — Sensitive Information Exposure | cvebase