NVD

Id
45170  
Name
CVE-2012-3582  
Description
Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user"s session.  
Reject
 
CVSS Version
2  
CVSS Score
2.9  
Severity
Low  
CVSS Base Score
2.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-09-04  
Modified Date
2013-02-13  
Seq
2012-3582  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226693 45170 CVE-2012-3582 55246  View
226694 45170 CVE-2012-3582 1027467  View
226695 45170 CVE-2012-3582 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120830_00  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28363 JVNDB-2012-004070 Symantec PGP Universal Server における秘密鍵を読まれる脆弱性 Symantec PGP Universal Server は、鍵を検索するリクエストが含まれたセッションを適切に管理しないため、秘密鍵を読まれる脆弱性が存在します。 CVE-2012-3582 56820 CVE-2012-3582 45170 2.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004070.html 2012-08-30 2012-09-05 View