CVE-2007-3022: Medium severity Symantec Norton Antivirus vulnerability
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3022?
CVE-2007-3022 is considered a high severity vulnerability due to the exposure of user password hashes after failed login attempts.
How do I fix CVE-2007-3022?
To fix CVE-2007-3022, upgrade to Symantec Reporting Server version 1.0.224.0 or later.
What products are affected by CVE-2007-3022?
CVE-2007-3022 affects Symantec Reporting Server, Symantec Client Security versions before 3.1, and Symantec AntiVirus Corporate Edition versions 10.1 and later.
Can CVE-2007-3022 be exploited remotely?
Yes, CVE-2007-3022 can be exploited remotely by attackers to obtain password hashes.
What is the impact of CVE-2007-3022 on security?
The impact of CVE-2007-3022 is significant, as it allows attackers to potentially compromise user accounts by cracking the exposed password hashes.