description: A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.
problem types: Information disclosure
affected:
{
product: Symantec Messaging Gateway (SMG)
vendor: n/a
versions:
status: affected, version: 10.7
}