Medium severity4.9NVD Advisory· Published Dec 10, 2020· Updated Jun 17, 2026

CVE-2020-12595

Description

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Symantec Messaging Gateway
cpe:2.3:a:broadcom:symantec_messaging_gateway:*:*:*:*:*:*:*:*
Range: <10.7.4
SMG/SMGdescription
Broadcom Corporation/SMGllm-fuzzy
Range: <10.7.4

Patches

Vulnerability mechanics

References

support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000