CVE-2005-3316

3 documents3 sources
Severity
7.5HIGH
EPSS
0.9%
top 24.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Symantec DiscoverySymantec ON Command Discovery
Timeline
PublishedOct 27
Latest updateMay 1

Description

The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDsymantec/on_command_discoverystandard_4.5, web_4.5+1

🔴Vulnerability Details

2
GHSA
GHSA-2pq6-j348-rpc3: The installation of ON Symantec Discovery 4↗2022-05-01
▶
CVEList
CVE-2005-3316: The installation of ON Symantec Discovery 4↗2005-10-27
▶
CVE-2005-3316 (HIGH CVSS 7.5) | The installation of ON Symantec Dis | cvebase.io