CVE-2008-6828

Опубликовано: 08 июн. 2009

Источник: nvd

CVSS3: 7.8

CVSS2: 4.3

EPSS Низкий

Описание

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

Ссылки

http://secunia.com/advisories/31773
Broken Link
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/31767
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021072
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2876
Broken Link
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46007
Third Party Advisory
VDB Entry
http://secunia.com/advisories/31773
Broken Link
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/31767
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021072
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2876
Broken Link
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46007
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*

Версия до 6.9.355 (исключая)

cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:-:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00043

Низкий

7.8 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-312

Связанные уязвимости

GHSA-mw3c-p8vx-hf5q