Lucene search

[email protected]CVE-2012-4613

HistoryNov 16, 2012 - 12:55 a.m.

CVE-2012-4613

2012-11-1600:55:00

CWE-287

[email protected]

web.nvd.nist.gov

emc

rsa

dpm

appliance

authentication

bypass

cve-2012-4613

security

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack.

CPENameOperatorVersion
emc:rsa_data_protection_manager_applianceemc rsa data protection manager applianceeq3.1
emc:rsa_data_protection_manager_applianceemc rsa data protection manager applianceeq3.2
emc:rsa_data_protection_manager_applianceemc rsa data protection manager applianceeq3.0
emc:rsa_data_protection_manager_applianceemc rsa data protection manager applianceeq2.7.0

CPE	Name	Operator	Version
emc:rsa_data_protection_manager_appliance	emc rsa data protection manager appliance	eq	3.1
emc:rsa_data_protection_manager_appliance	emc rsa data protection manager appliance	eq	3.2
emc:rsa_data_protection_manager_appliance	emc rsa data protection manager appliance	eq	3.0
emc:rsa_data_protection_manager_appliance	emc rsa data protection manager appliance	eq	2.7.0

References

archives.neohapsis.com/archives/bugtraq/2012-11/0050.html

www.securityfocus.com/bid/56508

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2012-4613

prion1 cvelist1 securityvulns2