← Back

CVE-2014-1644

nvd nist
Published: Mar 29, 2014Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account.

Affected (9)

Symantec
1 product
Liveupdate Administrator
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Symantec
Liveupdate Administrator
Up to 2.3.2
Liveupdate Administrator
Version 2.1.0
Liveupdate Administrator
Version 2.1.2
Liveupdate Administrator
Version 2.1.3
Liveupdate Administrator
Version 2.2.1
Liveupdate Administrator
Version 2.2.2.9
Liveupdate Administrator
Version 2.2.2
Liveupdate Administrator
Version 2.3.0
Liveupdate Administrator
Version 2.3.1

Related CWEs

CWE-255
CWE-255

References (8)

Source: secure@symantec.com
Source: secure@symantec.com
Source: secure@symantec.com
PatchVendor Advisory
Source: secure@symantec.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.