Lucene search
MitreCVE-2007-3095HistoryJun 06, 2007 - 10:30 p.m.
CVE-2007-3095
2007-06-0622:30:00
mitre
web.nvd.nist.gov
31
symantec
reporting server
cve-2007-3095
authentication bypass
security vulnerability
nvd
sav ce
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
68.8%
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to “disable the authentication system” and bypass authentication via unknown vectors.
Affected configurations
Node
symantecclient_securityMatch3.1
ORsymantecclient_securityMatch3.1.394
ORsymantecclient_securityMatch3.1.396
ORsymantecclient_securityMatch3.1.400
ORsymantecclient_securityMatch3.1.401
ORsymantecnorton_antivirusMatch10.0.2.2021corporate
ORsymantecnorton_antivirusMatch10.1corporate
ORsymantecnorton_antivirusMatch10.1.396corporate
ORsymantecnorton_antivirusMatch10.1.400corporate
ORsymantecnorton_antivirusMatch10.1.401corporate
ORsymantecreporting_serverRange≤1.0.197.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | client_security | 3.1 | cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.394 | cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.396 | cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.400 | cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:* |
| symantec | client_security | 3.1.401 | cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 10.0.2.2021 | cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:* |
| symantec | norton_antivirus | 10.1 | cpe:2.3:a:symantec:norton_antivirus:10.1:*:corporate:*:*:*:*:* |
| symantec | norton_antivirus | 10.1.396 | cpe:2.3:a:symantec:norton_antivirus:10.1.396:*:corporate:*:*:*:*:* |
| symantec | norton_antivirus | 10.1.400 | cpe:2.3:a:symantec:norton_antivirus:10.1.400:*:corporate:*:*:*:*:* |
| symantec | norton_antivirus | 10.1.401 | cpe:2.3:a:symantec:norton_antivirus:10.1.401:*:corporate:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2007-06-06 22:30:00
cvelist
cvelist
CVE-2007-3095
2007-06-06 22:00:00
nvd
nvd
CVE-2007-3095
2007-06-06 22:30:00
nessus
nessus
Symantec Reporting Server < 1.0.224.0 Multiple Vulnerabilities
2007-06-08 00:00:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
68.8%
Related for CVE-2007-3095