The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Encryption_management_server | Symantec | * | 3.3.1 (including) |
| Encryption_management_server | Symantec | 3.3.0 (including) | 3.3.0 (including) |
| Encryption_management_server | Symantec | 3.3.0-mp1 (including) | 3.3.0-mp1 (including) |
| Encryption_management_server | Symantec | 3.3.0-mp2 (including) | 3.3.0-mp2 (including) |