CVE-2015-0532 | BDVDB-2026-69259 Detail

Description#

EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2015/Apr/204
http://www.securitytracker.com/id/1032218
http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html

Exploit#

No public exploit known

History#

Version 12015-05-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.