CVE-2005-3316: Symantec Discovery

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.

Affected products

• Symantec Discovery: version 6.0 only
• Symantec On Command Discovery: version standard_4.5 only; version web_4.5 only

Published 2005-10-27. Last modified 2026-06-16.