Vulnerability Details CVE-2015-0531
EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/131748/EMC-SourceOne-Email-Management-Account-Lockout-Policy.html
- http://seclists.org/bugtraq/2015/May/22
- http://www.securitytracker.com/id/1032238
- http://packetstormsecurity.com/files/131748/EMC-SourceOne-Email-Management-Account-Lockout-Policy.html
- http://seclists.org/bugtraq/2015/May/22
- http://www.securitytracker.com/id/1032238
Products affected by CVE-2015-0531
-
cpe:2.3:a:emc:sourceone_email_management:7.1