SB2017070705 - Security restrictions bypass in EMC ESRS Policy Manager
Published: July 10, 2017
Security Bulletin ID
SB2017070705
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security restrictions bypass (CVE-ID: CVE-2017-4976)
The vulnerability allows an adjacent attacker to bypass security restrictions.The weakness exists due to use of default password by an undocumented account ('OpenDS admin').A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges on the local LDAP directory server.
Successful exploitation of the vulnerability results in full access to the affected system.
Remediation
Install update from vendor's website.