CVEvulnerability
CVE-2008-6828
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-312
Description
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
Affected configurations
• symantec altiris deployment solution (< 6.9.355)
• symantec altiris deployment solution 6.9.355
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- http://secunia.com/advisories/31773 Broken Link, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31767 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021072 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2876 Broken Link, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46007 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/31773 Broken Link, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/31767 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021072 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2876 Broken Link, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46007 Third Party Advisory, VDB Entry