VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2019-9697

CVE-2019-9697

Description

An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access.

Affected products

5
  • Symantec/Management Center4 versions
    cpe:2.3:a:symantec:management_center:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:symantec:management_center:*:*:*:*:*:*:*:*range: >=2.2,<2.2.2.1
    • cpe:2.3:a:symantec:management_center:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:management_center:2.1:*:*:*:*:*:*:*
    • (no CPE)range: <2.2.2.1
  • Symantec Corporation/Management Center (MC)v5
    Range: 2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.