CVE-2019-18377 - Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user

Back Back to CVE browser

HIGH

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user

Published Dec 11, 2019

7.2

HIGH

CVSS 3.1

EPSS 1.40%

Description

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected products

Vendor n/a Product Symantec Messaging Gateway Default
unknown
Affected
- prior to 10.7.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Symantec Messaging Gateway	unknown	Affected prior to 10.7.3

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8162
Advisory
https://support.symantec.com/us/en/article.SYMSA1501.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8162		Advisory
https://support.symantec.com/us/en/article.SYMSA1501.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Dec 11, 2019

Updated Aug 5, 2024

Reserved Oct 23, 2019

Link CVE-2019-18377

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18377

Red Hat

No data

ENISA EUVD

Assigner symantec

Published Dec 11, 2019

Updated Aug 5, 2024

Link EUVD-2019-8162

GitHub

No data