What is the CVSS score of CVE-2012-0400?

CVE-2012-0400 has a CVSS 2.0 base score of 7.9 (High). CVSS vector: AV:A/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 1.0%.

Envision CVE-2012-0400

HIGH

Improper Authentication (CWE-287)

2012-03-20 security_alert@emc.com

Authentication Bypass Envision

7.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.9 HIGH

AV:A/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Adjacent

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Mar 20, 2012 - 15:55 cve.org

HIGH 7.9

DescriptionCVE.org

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

AnalysisAI

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Rated high severity (CVSS 7.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Affected products include: Rsa Envision. Version information: before 4.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.