Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-101034

Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom Symantec Ghost Solution Suite

Default version status: unaffected

  • GSS_3.3_RU11affected
  • GSS_3.3_RU12affected
  • GSS_3.3.13affected

References