Description
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EMC ESRS Policy Manager prior to 6.8 | EMC ESRS Policy Manager prior to 6.8 | — |