CVE-2016-0912
CriticalSummary
EMC Data Domain OS versions 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions. This can be achieved by leveraging access to a different account with the same role as a target account or an account's session at an unattended workstation.
Risk Assessment
The organization may be exposed to unauthorized password changes, potentially leading to account takeover and access to sensitive data.
Recommendation
It is recommended to upgrade the system to version 5.7.2.0 or later and implement additional security measures to restrict access to user sessions.
Original NVD description (English source)
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account or (2) an account's session at an unattended workstation.