CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack.
- Score
- CVSS 2.0 6.9 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2012-11-16
- Last modified
- 2024-08-06
- Weaknesses
- CWE-287
Affected products
References
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html
- http://www.securityfocus.com/bid/56508