NVD

Id
55177  
Name
CVE-2007-3022  
Description
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-06-05  
Modified Date
2012-10-30  
Seq
2007-3022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280363 55177 CVE-2007-3022 24312  View
280364 55177 CVE-2007-3022 1018196  View
280365 55177 CVE-2007-3022 http://www.symantec.com/avcenter/security/Content/2007.06.05.html  View
280366 55177 CVE-2007-3022 ADV-2007-2074  View
280367 55177 CVE-2007-3022 symantec-reporting-information-disclosure(34740)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56945 JVNDB-2007-005637 Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における総当たり攻撃を実行される脆弱性 Symantec Client Security および Symantec AntiVirus Corporate Edition (SAV CE) などで使用される Symantec Reporting Server は、ユーザがログイン試行に失敗した後にパスワードハッシュを表示するため、総当たり攻撃 (brute-force attack) を実行される脆弱性が存在します。 CVE-2007-3022 26377 CVE-2007-3022 55177 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005637.html 2007-06-05 2012-12-20 View