CVE-2007-3022

Published: Jun 5, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.

Affected (11)

Products: Symantec: Client Security, Norton Antivirus, Reporting Server

3 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Symantec Client Security	Version 3.1.394
Symantec Client Security	Version 3.1.396
Symantec Client Security	Version 3.1.400
Symantec Client Security	Version 3.1.401
Symantec Client Security	Version 3.1
Symantec Norton Antivirus	Version 10.0.2.2021
Symantec Norton Antivirus	Version 10.1.396
Symantec Norton Antivirus	Version 10.1.400
Symantec Norton Antivirus	Version 10.1.401
Symantec Norton Antivirus	Version 10.1
Symantec Reporting Server	Up to 1.0.197.0