axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
| Software | From | Fixed in |
|---|---|---|
| symantec / altiris_deployment_solution | 6.8 | 6.8.x |
| symantec / altiris_deployment_solution | 6.8-sp1 | 6.8-sp1.x |
| symantec / altiris_deployment_solution | 6.8-sp2 | 6.8-sp2.x |
| symantec / altiris_deployment_solution | 6.9 | 6.9.176 |