CVE-2017-4976
CriticalSummary
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.
Risk Assessment
The risk to the organization is the potential for unauthorized access to the system and full control over the local LDAP server, which could lead to serious security breaches.
Recommendation
It is recommended to immediately change the default password for the OpenDS admin account and to upgrade to the latest version of EMC ESRS Policy Manager to eliminate this vulnerability.
Original NVD description (English source)
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.