{"uuid": "d47b17c4-3ecc-42b2-bfa1-31f6138aec88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-2203", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/symantec_brightmail_ldapcreds.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Fakhir Karim Reda \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will grab the AD account saved in Symantec Messaging Gateway and then\\n          decipher it using the disclosed Symantec PBE key.  Note that authentication is required\\n          in order to successfully grab the LDAP credentials, and you need at least a read account.\\n          Version 10.6.0-7 and earlier are affected\", \"disclosure_date\": \"2015-12-17\", \"fullname\": \"auxiliary/scanner/http/symantec_brightmail_ldapcreds\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Symantec Messaging Gateway 10 Exposure of Stored AD Password Vulnerability\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/symantec_brightmail_ldapcreds.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/symantec_brightmail_ldapcreds\", \"references\": [\"URL-https://www.broadcom.com/support/security-center/securityupdates/detail?fid=security_advisory&pvid=security_advisory&suid=20160418_00&year=\", \"CVE-2016-2203\", \"BID-86137\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.548759Z"}