CVE-2007-3095

Published: Jun 6, 2007Modified: Apr 23, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.

Affected (11)

Products: Symantec: Client Security, Norton Antivirus, Reporting Server

3 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Symantec Client Security	Version 3.1.394
Symantec Client Security	Version 3.1.396
Symantec Client Security	Version 3.1.400
Symantec Client Security	Version 3.1.401
Symantec Client Security	Version 3.1
Symantec Norton Antivirus	Version 10.0.2.2021
Symantec Norton Antivirus	Version 10.1.396
Symantec Norton Antivirus	Version 10.1.400
Symantec Norton Antivirus	Version 10.1.401
Symantec Norton Antivirus	Version 10.1
Symantec Reporting Server	Up to 1.0.197.0