CVE-2017-4976

Summary

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.

Affected Software

VendorProductVersion RangeStatus
n/aEMC ESRS Policy Manager prior to 6.8EMC ESRS Policy Manager prior to 6.8affected

Weaknesses

  • undocumented account vulnerability

ADP Enrichment

CVE Program Container

Additional References

References