CVE-2008-6828

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity...

7.8 High

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.25%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2008-6828
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 4.3 MediumAV:L/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-312
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-6828
Updated: 2026-11-02

EUVDEUVD-2008-6788 No score

Record: EUVD-2008-6788
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mw3c-p8vx-hf5q 7.8

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity...

Record: GHSA-mw3c-p8vx-hf5q
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-312
Updated: 2026-11-02

Affected products

symantec altiris deployment solution

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-6828 is a high vulnerability (CVSS 7.8) in Symantec Altiris Deployment Solution, published June 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.