CVE-2016-0912 Security feature bypass in n/a
Remote authenticated users can bypass password-change restrictions by leveraging access to another account or an unattended session.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-0912?
CVE-2016-0912 is a critical vulnerability in n/a, published on 19 Jun 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account or (2) an account's session at an unattended workstation.
Weakness: CWE-264
Which versions are affected by CVE-2016-0912?
It affects 1 product.
Products include Dell Emc Data Domain Os.
How do I fix CVE-2016-0912?
No fix has been published for CVE-2016-0912 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-0912 being exploited?
There is no known exploitation of CVE-2016-0912 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2023-23692 Command injection in Data Domain
- CVE-2016-0911 Misconfiguration in n/a
- CVE-2017-4983 Privilege escalation in EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0
- CVE-2016-8216 Command injection in EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10
Sources
Also known as GHSA-62j7-m32f-g9j9.