Emc

Sourceone Email Management

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2015-0531

  • EPSS 0.26%
  • Published 07.05.2015 01:59:00
  • Last modified 12.04.2025 10:46:40

EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

2.1

CVE-2011-4142

  • EPSS 0.06%
  • Published 19.01.2012 11:55:10
  • Last modified 11.04.2025 00:51:21

The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these file...

3.5

CVE-2011-1424

  • EPSS 0.16%
  • Published 24.05.2011 23:55:02
  • Last modified 11.04.2025 00:51:21

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated use...