Symantec (Blue Coat) Reporter Multiple Vulnerabilities (SA158)

According to its self-reported version number, the Symantec formerly Blue Coat Reporter installation running on the remote host is 9.5 prior to 9.5.4.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not attempted to exploit these issues but has instead relied only o...

CVE-2017-15531

Symantec Reporter (Symantec/Blue Coat) is affected by CVE-2017-15531 due to insufficient restriction of excessive authentication attempts on the management interface. A remote attacker could brute-force passwords to gain access. Affected versions include Reporter 9.5 before 9.5.4.1 and 10.1 befor...

SA158: Improper Restriction of Excessive Authentication Attempts in Reporter

SUMMARY Symantec Reporter does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter. AFFECTED PRODUCTS Reporter --- CVE | Affected Versions | Remediation CVE-2017-15531 | 10...