9.8
CVSSv3

CVE-2017-15531

Published: 23/01/2018 Updated: 04/05/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Symantec Reporter 9.5 before 9.5.4.1 and 10.1 before 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter.

Vulnerable Product Search on Vulmon Subscribe to Product

symantec reporter

symantec reporter 10.1