Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive information about package-server access, or cause a denial of service, by leveraging knowledge of this key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Management Platform 未授权访问漏洞
Vulnerability Description
Symantec Management Platform(SMP)是美国赛门铁克(Symantec)公司的一套为IT相关解决方案提供服务的管理平台。该平台提供的服务包括:安全性、客户端通信和管理、任务执行、文件部署等。 Altiris产品中使用的SMP 7.0和7.1版本,7.0 SP1和7.1 SP1版本中的代理和任务代理组件中存在未授权访问漏洞,该漏洞源于不同客户间的安装使用相同的注册加密密钥。本地用户可通过使用相同的服务密钥,利用该漏洞获取数据包服务器和其他网络可用资源的访问权限,或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A