What’s Vulnerable › Vulnerabilities

CVE-2012-3582

• Severity: low (CVSS 2.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-09-04 · updated 2026-06-16
• Weakness: CWE-264

Description

Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circumstances by making a request near the end of a user's session.

Affected products

• Symantec Pgp Universal Server: 3.2.0, 3.2.1

References

• http://www.securityfocus.com/bid/55246
• http://www.securitytracker.com/id?1027467
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120830_00
• http://www.securityfocus.com/bid/55246
• http://www.securitytracker.com/id?1027467
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120830_00

Get alerted when CVE-2012-3582 or the next vulnerability affects your stack