Description
EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
References
- 52557 vdb-entry
- 48484 third-party-advisory
- 1026819 vdb-entry
- 80207 vdb-entry
- envision-weak-security(74140) vdb-entry
- 20120318 ESA-2012-014: RSA enVision Multiple Vulnerabilities mailing-list