CVE-2019-18377Improper Privilege Management in Messaging Gateway

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
1.0%
top 23.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 11
Latest updateMay 24

Description

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

CVEListV5broadcom/symantec_messaging_gatewayprior to 10.7.3

🔴Vulnerability Details

2
GHSA
GHSA-28j2-jrj9-6xv4: Symantec Messaging Gateway, prior to 102022-05-24
CVEList
CVE-2019-18377: Symantec Messaging Gateway, prior to 102019-12-11
CVE-2019-18377 — Improper Privilege Management | cvebase