critical9.8
CVE-2017-4976
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password.
Impact
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Esrs Policy Manager | through 6.7 |