Vulnerabilities > CVE-2006-3457 - Information Disclosure vulnerability in Symantec On-Demand Agent and On-Demand Protection

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
symantec
NVD
Published: 2006-08-05
Updated: 2018-10-18

Summary

Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.

Vulnerable Configurations

Part Description Count
Application
Symantec
2

References