CVE-2015-0532
emc rsa identity management and governance: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.
EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- emc:rsa_identity_management_and_governance
References
- http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html
- http://seclists.org/bugtraq/2015/Apr/204
- http://www.securitytracker.com/id/1032218
- http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html
- http://seclists.org/bugtraq/2015/Apr/204