First published: Tue Mar 20 2012(Updated: )
EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
RSA enVision | =4.0-sp1 | |
RSA enVision | =4.0-sp2 | |
RSA enVision | =4.0-sp3 | |
RSA enVision | =4.0-sp4 | |
RSA enVision | =4.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0400 is considered to be of medium severity due to the potential for remote attackers to exploit the vulnerability through brute-force attacks.
To fix CVE-2012-0400, you should upgrade to RSA enVision 4.1 Patch 4 or later, which addresses the authentication restrictions.
CVE-2012-0400 affects RSA enVision versions 4.0 SP1, SP2, SP3, SP4, and 4.1 prior to Patch 4.
The risks associated with CVE-2012-0400 include unauthorized access to sensitive data and potential system compromise due to brute-force authentication attempts.
Yes, CVE-2012-0400 can be exploited remotely, allowing attackers to attempt unauthorized access from outside the network.