CVE-2015-0531
EMC SourceOne Email Management < 7.1 - Unauthenticated Brute-Force Attack via Missing Account Lockout
Title source: llmDescription
EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/131748/EMC-SourceOne-Email-Management-Account-Lockout-Policy.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032238
Mailing List mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2015/May/22
Scores
EPSS
0.0026
EPSS Percentile
49.4%
Details
CWE
CWE-284
Status
published
Products (1)
emc/sourceone_email_management
< 7.1
Published
May 07, 2015
Tracked Since
Feb 18, 2026