CVE-2015-0532

State: Published
Severity: Not scored
Published: May 1, 2015
Updated: Aug 6, 2024
Reserved: Dec 17, 2014

Description

EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20150429 ESA-2015-078: RSA Identity Management and Governance (IMG) Insecure Password Reset Vulnerabilitymailing-list
1032218vdb-entry
http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.