CVE-2015-6843 - Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach

Back Back to CVE browser

MEDIUM

Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach

Published Oct 18, 2015

5.0

MEDIUM

CVSS 2.0

EPSS 2.94%

Description

Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
x_refsource_MISCThird Party Advisory
http://seclists.org/bugtraq/2015/Oct/58
mailing-listx_refsource_BUGTRAQMailing List
http://www.securitytracker.com/id/1033787
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html		x_refsource_MISCThird Party Advisory
http://seclists.org/bugtraq/2015/Oct/58		mailing-listx_refsource_BUGTRAQMailing List
http://www.securitytracker.com/id/1033787		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry