QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-3022

Back to search

CVE-2007-3022

Published: Jun 5, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.

VendorProductVersions

n/a

n/a

affected
n/a

References

24312
vdb-entry
x_refsource_BID
36108
vdb-entry
x_refsource_OSVDB
1018196
vdb-entry
x_refsource_SECTRACK
ADV-2007-2074
vdb-entry
x_refsource_VUPEN
25543
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now