PT-2014-4273
CVE-2014-1644
·
تاريخ النشر
2014-03-29
·
تاريخ التحديث
2014-03-31
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Symantec LiveUpdate Administrator versions prior to 2.3.2.110
Description
The issue concerns the forgotten-password feature in the management GUI of Symantec LiveUpdate Administrator. It allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account.
Recommendations
For versions prior to 2.3.2.110, update to version 2.3.2.110 or later to resolve the issue. As a temporary workaround, consider restricting access to the forgotten-password feature in the management GUI until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾