CVE-2012-3582
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
04/09/2012
Last modified:
14/02/2013
Description
Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session.
Impact
Base Score 2.0
2.90
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:symantec:pgp_universal_server:3.2.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:symantec:pgp_universal_server:3.2.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page