CVE-2018-12242 - The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network

Back Back to CVE browser

CRITICAL

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network

Published Sep 19, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 2.95%

Description

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.

Affected products

Vendor Symantec Corporation Product Symantec Messaging Gateway Default
n/a
- Version
  Prior to 10.6.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Symantec Corporation

Symantec Messaging Gateway

n/a

Version	Status	Constraints
Prior to 10.6.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

http://www.securityfocus.com/bid/105329
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1461.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105329		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1461.html		x_refsource_CONFIRMVendor Advisory