Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2005-3316

The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.

  • Published: Oct 27, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-3316
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
symantec / discovery 6.0 6.0.x
symantec / on_command_discovery standard_4.5 standard_4.5.x
symantec / on_command_discovery web_4.5 web_4.5.x