Auth bypass in EMC Rsa Data Protection Manager Appliance

CVE-2012-4613

EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack.

Vulnerability class: Broken Authentication

EPSS: 0.003 (25.9th percentile) — read the EPSS interpretation.

Affected products

Emc Rsa_data_protection_manager_appliance — versions 2.7.0, 3.0, 3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_BID)