Lucene search

K
cveDellCVE-2015-0531
HistoryMay 07, 2015 - 1:59 a.m.

CVE-2015-0531

2015-05-0701:59:00
CWE-284
dell
web.nvd.nist.gov
29
emc
sourceone
email management
security vulnerability
cve-2015-0531
nvd
brute-force attack

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

71.1%

EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected configurations

Nvd
Node
emcsourceone_email_managementRange7.1
VendorProductVersionCPE
emcsourceone_email_management*cpe:2.3:a:emc:sourceone_email_management:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

71.1%

Related for CVE-2015-0531