CVE-2016-0922

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2016-09-18

Last modified

2024-08-05

Weaknesses

CWE-285

Affected products

• Vipr Srm (Emc)

References

• http://seclists.org/bugtraq/2016/Sep/17
• http://www.securityfocus.com/bid/92945