CVE-2012-3582

CVE-2012-3582 describes a session management vulnerability in Symantec PGP Universal Server versions 3.2.x prior to 3.2.1 MP2. This flaw could allow a remote attacker, under specific opportunistic circumstances, to read a private key by timing a request near the end of a user's session. With a CVSS score of 2.9, this vulnerability is considered low severity, requiring network access and medium attack complexity to achieve partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.