CVE-2008-6886 | BDVDB-2026-37674 Detail

Description#

RSA EnVision 3.5.0, 3.5.1, 3.5.2, and 3.7.0 does not properly restrict access to unspecified user profile functionality, which allows remote attackers to obtain the administrator password hash and conduct brute force guessing attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=122765140110581&w=2
http://www.secfault.org/?p=78
http://www.osvdb.org/50273
http://www.securityfocus.com/bid/32473
http://secunia.com/advisories/32883
https://exchange.xforce.ibmcloud.com/vulnerabilities/46884
http://www.vupen.com/english/advisories/2008/3288

Exploit#

No public exploit known

History#

Version 12009-08-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.