CVE-2017-4976: Critical severity dell emc srs policy manager vulnerability
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4976?
CVE-2017-4976 is considered a critical vulnerability due to the potential for unauthorized access and administrative privileges.
How do I fix CVE-2017-4976?
To fix CVE-2017-4976, upgrade EMC ESRS Policy Manager to version 6.8 or later to remove the undocumented account and default password.
Who is affected by CVE-2017-4976?
Organizations using EMC ESRS Policy Manager versions prior to 6.8 are affected by CVE-2017-4976.
What kind of access can an attacker gain through CVE-2017-4976?
An attacker exploiting CVE-2017-4976 can gain administrative access to the local LDAP directory server.
Is CVE-2017-4976 remotely exploitable?
Yes, CVE-2017-4976 is remotely exploitable if the attacker knows the default password for the undocumented account.