Skip to content
OpenAdvisories

Product · Broadcom

Symantec IT Management Suite

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.1

    Arbitrary File Read as SYSTEM in Symantec ITMS

    The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSys…

  • Medium 6.4

    Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

    Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage