Brute Force Vulnerability in Symantec Reporter Management Interface

CVE-2017-15531

What is CVE-2017-15531?

Symantec Reporter versions 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 are vulnerable due to a lack of restrictions on excessive authentication attempts for users on the management interface. This vulnerability allows remote attackers to execute brute force attacks to guess passwords and potentially gain unauthorized access to the Reporter system. Administrators using affected versions should apply the latest security updates to mitigate this risk.

References