CVE-2008-6828: Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account passwor...

Security readout for executives and security teams

This flaw can expose a privileged Altiris Deployment Solution password in cleartext memory on affected servers. A local user could use that password to gain higher privileges and change managed client systems. The business risk is concentrated where this legacy deployment platform still controls endpoints or servers. Exposure is likely limited to organizations still running Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1. Risk is highest on Deployment Solution Servers where non-administrative local users, shared operators, or compromised accounts can access the host. Prioritize remediation if the product still manages production endpoints. This is an older, local-access issue, but compromise of deployment infrastructure can affect many client systems. If the product is retired or fully isolated, urgency is lower but should still be documented. Mitigation focus: Inventory Altiris Deployment Solution 6.x servers and confirm exact build levels.; Upgrade affected servers to 6.9.355 SP1 or later per Symantec guidance.; Restrict local logon access to Deployment Solution Servers..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.