Vulnerability in EMC Unified Infrastructure Manager\/provisioning

CVE-2015-0546

EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name.

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

Emc Unified_infrastructure_manager\/provisioning — versions 4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)