CVE-2014-7287: Medium severity symantec encryption management server vulnerability
The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject header.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-7287?
CVE-2014-7287 has been classified with a medium severity level due to its potential impacts on email communication.
How do I fix CVE-2014-7287?
To address CVE-2014-7287, upgrade to Symantec PGP Universal Server or Encryption Management Server version 3.3.2 MP7 or later.
What products are affected by CVE-2014-7287?
CVE-2014-7287 affects Symantec PGP Universal Server and Encryption Management Server versions before 3.3.2 MP7.
Can CVE-2014-7287 lead to unauthorized access?
Yes, CVE-2014-7287 can allow remote attackers to manipulate outbound email content, potentially leading to unauthorized information disclosure.
What types of attacks exploit CVE-2014-7287?
CVE-2014-7287 can be exploited via crafted key UID values sent in inbound email messages, affecting how outbound email is processed.