VULNERABILITY INTELLIGENCE

CVE-2018-12242

CVSS score9.8 CRITICAL

EPSS probability2.95%

CISA KEVNot currently listed

Published2018-09-19

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.

Weakness classification

CWE-287: Improper Authentication

Primary references

secure@symantec.com — Third Party Advisory, VDB Entry
secure@symantec.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory