CVE-2019-12753

An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The malicious administrator user can also obtain the passwords of other Reporter web UI users.
Configurations

Configuration 1 (hide)

cpe:2.3:a:symantec:reporter:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:23

Type Values Removed Values Added
References () https://support.symantec.com/us/en/article.SYMSA1489.html - Vendor Advisory () https://support.symantec.com/us/en/article.SYMSA1489.html - Vendor Advisory

Information

Published : 2019-08-30 09:15

Updated : 2024-11-21 04:23


NVD link : CVE-2019-12753

Mitre link : CVE-2019-12753

CVE.ORG link : CVE-2019-12753


JSON object : View

Products Affected

symantec

  • reporter