CVE-2016-2203: High severity symantec messaging gateway for service providers vulnerability
Published Apr 22, 2016
·Updated
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
Affected Software
3 affected components
Symantec Messaging Gateway=10.6.0-patch3
Symantec Messaging Gateway=10.6.0-patch5
Symantec Messaging Gateway=10.6.0-patch7
Event History
Apr 22, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2203?
CVE-2016-2203 has a moderate severity level as it allows local users to discover sensitive information.
2
How do I fix CVE-2016-2203?
To fix CVE-2016-2203, upgrade to Symantec Messaging Gateway version 10.6.1 or later.
3
What impact does CVE-2016-2203 have on affected systems?
CVE-2016-2203 might allow local users to potentially retrieve encrypted Active Directory passwords.
4
Which versions of Symantec Messaging Gateway are affected by CVE-2016-2203?
CVE-2016-2203 affects Symantec Messaging Gateway versions 10.6.0 patched up to patch 7.
5
Can CVE-2016-2203 be exploited remotely?
No, CVE-2016-2203 requires local access to the system to be exploited.