Description
EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack.
References
- 92945 vdb-entry
- 20160913 ESA-2016-104: EMC ViPR SRM Multiple Vulnerabilities mailing-list