Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2006-0230
HistoryApr 25, 2006 - 1:02 a.m.

Design/Logic Flaw

2006-04-2501:02:00
PRIOn knowledge base
www.prio-n.com
1

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.157 Low

EPSS

Percentile

95.8%

JSON

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.

CPENameOperatorVersion
antivirus_scan_engineeq5.0.0.24

Related

securityvulns 1
checkpoint_advisories 1
cve 1
cert 1
nessus 1
securityvulns
securityvulns
Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error
2006-04-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Symantec Scan Engine Authentication Bypass (CVE-2006-0230)
2010-03-23 00:00:00
cve
cve
CVE-2006-0230
2006-04-25 01:02:00
cert
cert
Symantec Scan Engine fails to properly perform authentication
2006-05-01 00:00:00
nessus
nessus
Symantec AntiVirus Scan Engine Web Interface Multiple Remote Vulnerabilities
2006-04-24 00:00:00

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.157 Low

EPSS

Percentile

95.8%

JSON
Related for PRION:CVE-2006-0230
securityvulns1checkpoint_advisories1cve1cert1nessus1