CVE-2006-3457: Symantec On-Demand Agent

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.

Affected products

• Symantec On-Demand Agent: up to and including 2.5_mr2_build_2156
• Symantec On-Demand Protection: up to and including 2.6_build_2232

Published 2006-08-05. Last modified 2026-06-16.