Lucene search

PRIOn knowledge basePRION:CVE-2012-4613

HistoryNov 16, 2012 - 12:55 a.m.

Authentication flaw

2012-11-1600:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack.

CPENameOperatorVersion
rsa_data_protection_manager_applianceeq3.1
rsa_data_protection_manager_applianceeq3.2
rsa_data_protection_manager_applianceeq3.0
rsa_data_protection_manager_applianceeq2.7.0

Name	Operator	Version
rsa_data_protection_manager_appliance	eq	3.1
rsa_data_protection_manager_appliance	eq	3.2
rsa_data_protection_manager_appliance	eq	3.0
rsa_data_protection_manager_appliance	eq	2.7.0

References

archives.neohapsis.com/archives/bugtraq/2012-11/0050.html

www.securityfocus.com/bid/56508

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2012-4613