Design/Logic Flaw

2015-10-1814:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.3%

JSON

Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach.

CPENameOperatorVersion
sourceone_email_supervisorle7.1

CPE	Name	Operator	Version
	sourceone_email_supervisor	le	7.1

References

packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html

seclists.org/bugtraq/2015/Oct/58

www.securitytracker.com/id/1033787