CVE-2016-2203

High

Published: 22/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to AD resources, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade the devices to version 10.6.1 or later to mitigate this vulnerability.

Other vulnerabilities in Symantec Messaging Gateway (SMG) Appliance

CVE-2016-2204High
The management console on Symantec Messaging Gateway (SMG) Appliance devices before version 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input.

Original NVD description (English source)

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.