Unrated severityNVD Advisory· Published Mar 15, 2004· Updated Apr 16, 2026

CVE-2004-0190

Description

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.

Affected products

Symantec/Firewall Vpn Appliance 100
cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*
Symantec/Firewall Vpn Appliance 200
cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*
Symantec/Firewall Vpn Appliance 200r
cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/9784nvdPatchVendor Advisory
lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.htmlnvd
marc.infonvd
www.osvdb.org/4117nvd
exchange.xforce.ibmcloud.com/vulnerabilities/15212nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000