Remote Command Execution Vulnerability in Symantec PGP Universal Server and Encryption Management Server

CVE-2014-7288

Summary

The Symantec PGP Universal Server and Encryption Management Server prior to version 3.3.2 MP7 are susceptible to a vulnerability that allows remote authenticated administrators to execute arbitrary shell commands. This exposure arises from improperly validated input during a database-backup restore operation, enabling attackers to craft malicious command lines. A successful exploitation could lead to unauthorized control and manipulation of system commands, posing a significant security risk. Organizations should ensure that they are running an updated version of the software to mitigate the potential threat.

References