CVE-2012-4613
Severity Score
6.9
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack.
EMC RSA Data Protection Manager Appliance v3.x y v2.7.x antes de v3.2.1 no restringe correctamente el número de intentos de autenticación de una cuenta de usuario, lo que hace que sea más fácil para los usuarios locales eludir restricciones de acceso por medio de un ataque de fuerza bruta.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-08-24 CVE Reserved
- 2012-11-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2012-11/0050.html | Mailing List | |
| http://www.securityfocus.com/bid/56508 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Rsa Data Protection Manager Appliance Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" | 2.7.0 Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" and version "2.7.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Data Protection Manager Appliance Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" | 3.0 Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" and version "3.0" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Data Protection Manager Appliance Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" | 3.1 Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" and version "3.1" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Rsa Data Protection Manager Appliance Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" | 3.2 Search vendor "Emc" for product "Rsa Data Protection Manager Appliance" and version "3.2" | - |
Affected
| ||||||