CVE-2017-15531

CVE-2017-15531 describes an authentication bypass vulnerability in Symantec Reporter versions 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5. This flaw allows a remote attacker to conduct brute-force attacks against the management interface due to a lack of excessive authentication attempt restrictions. Rated as Critical with a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high severity warrants immediate patching.