CVE-2007-3022
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec...
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
Exploit likelihood
What each source reports
NVD Score used
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
- Record
CVE-2007-3022- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
- Record
CVE-2007-3022- Updated
- 2026-11-02
EUVDEUVD-2007-3014 No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
- Record
EUVD-2007-3014- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8xj5-mgrv-g748 No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec...
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
- Record
GHSA-8xj5-mgrv-g748- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3022 is a medium vulnerability (CVSS 4.3) in Symantec Client Security, published June 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.05%, the 81st percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/34740
securityfocus.com/bid/24312
osvdb.org/36108
symantec.com/avcenter/security/Content/2007.06.05.html
securitytracker.com/id?1018196
vupen.com/english/advisories/2007/2074
secunia.com/advisories/25543
nvd.nist.gov/vuln/detail/CVE-2007-3022
github.com/advisories/GHSA-8xj5-mgrv-g748