CVE-2017-15531 Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to gu...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec reporter | >= 9.5, < 9.5.4.1 | 9.5.4.1 |
| symantec reporter | = 10.1 | No fix listed |
| symantec reporter | = 9.5 prior to 9.5.4.1 | No fix listed |
| symantec reporter | = 10.x prior to 10.2 | No fix listed |
References
- 102751 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory