CVE-2007-2619

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-11 · updated 2026-06-16

Description

Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.

Affected products

Symantec Pcanywhere: 11.5, 11.5.1, 12.0

References

http://osvdb.org/41982
http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html
http://securitytracker.com/id?1018032
http://www.securityfocus.com/bid/23875
http://www.vupen.com/english/advisories/2007/1753
https://exchange.xforce.ibmcloud.com/vulnerabilities/34203
http://osvdb.org/41982
http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html
http://securitytracker.com/id?1018032
http://www.securityfocus.com/bid/23875
http://www.vupen.com/english/advisories/2007/1753
https://exchange.xforce.ibmcloud.com/vulnerabilities/34203

Get alerted when CVE-2007-2619 or the next vulnerability affects your stack