PT-2012-4828

CVE-2012-3582

·

Published

2012-09-04

·

Updated

2013-02-14

Description by

CVSS 2.0
2.9
Low
MetricsAV:A/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1
Description The issue arises from improper session management, specifically with key search requests. This could potentially allow remote attackers to read a private key under certain circumstances by making a request near the end of a user's session.
Recommendations For Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1, update to version 3.2.1 MP2 to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-3582
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com