Information disclosure in EMC Sourceone Email Supervisor

CVE-2015-6843

Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach.

Vulnerability class: Information Disclosure

EPSS: 0.029 (85.7th percentile) — read the EPSS interpretation.

Affected products

Emc Sourceone_email_supervisor
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Mailing List)
security_alert@emc.com (Third Party Advisory, x_refsource_MISC)
security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)