Credential Disclosure in Symantec Altiris Deployment Solution

CVE-2008-2291

Summary

The axengine.exe component of Symantec's Altiris Deployment Solution versions 6.8.x and 6.9.x prior to 6.9.176 is susceptible to a security flaw that leads to the generation of domain credentials using a fixed salt or without any salt. This vulnerability allows remote attackers to potentially guess encrypted domain credentials, leading to unauthorized access. Mitigating this risk is crucial for maintaining the security and integrity of affected systems.

References