Skip to content

CVE-2017-4976 EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and g...

CriticalCVSS 9.8 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.

Affected products

ProductAffected versionsFixed in
emc esrs policy manager <= 6.7 No fix listed

References

  • seclists.org mailing-list third-party-advisory
  • 1038840 issue-tracking third-party-advisory vdb-entry