CVE-2015-8148

High

Published: 18/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.

Risk Assessment

Attackers may gain access to sensitive data regarding administrator accounts, potentially leading to further attacks on the system.

Recommendation

It is recommended to update Symantec Encryption Management Server to the latest version to mitigate this vulnerability.

Other vulnerabilities in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12

CVE-2015-8149High
The LDAP service in Symantec Encryption Management Server (SEMS) version 3.3.2 before MP12 is vulnerable to remote attacks that can lead to service outages due to heap memory corruption.

Original NVD description (English source)

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.