Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00043
Percentile: 0.12449

CVSS Scoring

Mapped CWE(s)

• CWE-312 : Cleartext Storage of Sensitive Information

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1005 : Data from Local System
  Kill Chain: collection
• T1552.004 : Private Keys
  Kill Chain: credential-access

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*
• cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:-:*:*:*:*:*:*

← Back to Home