CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Use of Hard-coded Credentials
Summary: emc esrs policy manager prior to 6.8 contains an undocumented account (opends admin) with a default password. a remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local ldap directory server.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-09
Last Modified Date: 2019-10-03