CVE-2019-12753
Medium
Description
An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external SMTP, FTP, FTPS, LDAP, and Cloud Log Download servers that they might not otherwise be authorized to access. The malicious administrator user can also obtain the passwords of other Reporter web UI users.
SeverityMedium
CVSS4.9
Exploit probability—
ProductSymantec Reporter
PublishedAug 30, 2019
First seenAug 30, 2019
How to fix
Update
- symantec reporter10.3.2.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec reporter | 10.3 ≤ v < 10.3.2.5 | 10.3.2.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.