| Package | Affected versions | Patched versions |
|---|---|---|
| on-demand agent | ≤ 2.5_mr2_build_2156 | |
| on-demand protection | ≤ 2.6_build_2232 |
Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free