High severity · published Apr 22, 2016
CVE-2016-2203
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read…
7.8
CVSS
7.1%
EPSS
No
On KEV
Description
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MG
Messaging Gateway · Symantec
10.6.0; 10.6.0; 10.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-2203
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-2203
Exploit
http://packetstormsecurity.com/files/136758/Symantec-Brightmail-10.6.0-7-LDAP-Credential-Grabber.html
Exploit
http://www.securityfocus.com/bid/86137
Third Party Advisory
http://www.securitytracker.com/id/1035609
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160418_00
Exploit
https://www.exploit-db.com/exploits/39715/
More from Messaging Gateway
10.0
CVE-2017-6326
The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands…
9.8
CVE-2024-23615
Symantec Messaging Gateway Buffer Overflow
9.8
CVE-2024-23614
Symantec Messaging Gateway Buffer Overflow
9.8
CVE-2018-12242
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially…
8.8
CVE-2018-12243
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML input containing a reference…