Remote Password Disclosure in RSA EnVision by RSA Security
CVE-2008-6886
Currently unrated
What is CVE-2008-6886?
RSA EnVision versions 3.5.0, 3.5.1, 3.5.2, and 3.7.0 have a flaw that improperly restricts access to specific user profile functionalities. This vulnerability can be exploited by remote attackers who are able to obtain the administrator password hash, thus enabling them to launch brute force guessing attacks. Organizations utilizing these versions must take immediate action to secure their systems against unauthorized access and potential data breaches.