CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. Its EPSS score suggests a 58.8% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2012-4347
Severity
MEDIUM
CVSS
5
EPSS
58.83%
Original NVD Description
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.