CVE-2026-101034

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.

Score

CVSS 4.0 6.8 Medium

Status

Awaiting Analysis - secure@symantec.com

Published

2026-10-27

Last modified

2026-10-27

Weaknesses

CWE-522

Affected products

• Symantec Ghost Solution Suite (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39440