Lucene search
+L

1047 matches found

Prion
Prion
•added 2018/04/25 8:29 p.m.•33 views

Design/Logic Flaw

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

4CVSS5.8AI score0.01191EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/04/25 8:00 p.m.•41 views

CVE-2014-0882

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

5.9AI score0.01191EPSS
SaveExploits0References3
OSV
OSV
•added 2018/03/16 8:29 p.m.•17 views

CVE-2017-8013

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...

9.8CVSS5.8AI score0.02131EPSS
SaveExploits1References3
NVD
NVD
•added 2018/03/16 8:29 p.m.•35 views

CVE-2017-8013

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...

9.8CVSS9.6AI score0.02131EPSS
SaveExploits1References3
Prion
Prion
•added 2018/03/16 8:29 p.m.•27 views

Hardcoded credentials

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...

7.5CVSS9.6AI score0.02131EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2018/03/16 8:00 p.m.•33 views

CVE-2017-8013

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...

9.7AI score0.02131EPSS
SaveExploits1References3
CVE
CVE
•added 2018/03/16 8:00 p.m.•59 views

CVE-2017-8013

CVE-2017-8013 affects EMC Data Protection Advisor 6.3.x (before patch 67) and 6.4.x (before patch 130). Root cause: undocumented accounts with hard-coded passwords (Apollo System Test, emc.dpa.agent.logon, emc.dpa.metrics.logon) enabling access via REST APIs and potentially administrative privile...

9.8CVSS9.5AI score0.02131EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/16 12:00 a.m.•4 views

CVE-2017-8013: Use of Hard-coded Credentials

EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges. Affected accounts are: "Apollo System Test", "emc.dpa.agent.logon" and "emc.dpa.metrics.logon". An attacker with knowledge of the password...

9.8CVSS8.2AI score0.02131EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2018/03/16 12:00 a.m.•37 views

EMC Data Protection Advisor < 6.4.110 Database Hardcoded Password Vulnerability

According to its self-reported version number, the EMC Data Protection Advisor running on the remote host is 6.3.x prior to 6.3 patch 159 or 6.4.x prior to 6.4 patch 110. It is, therefore, affected by a default credential vulnerability due to hardcoded password with the appolosuperuser database...

7.8CVSS7.5AI score0.00345EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/03/13 12:00 a.m.•18 views

Dell EMC Data Protection Advisor Local Hardcoded Credential Information Disclosure Vulnerability

Dell EMC Data Protection Advisor is a suite of data protection management solutions from Dell USA. The solution supports automated and centralized execution of all such data collection and analysis, as well as obtaining a single comprehensive view of the data protection environment and activities...

7.8CVSS7AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/12 5:29 p.m.•16 views

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

7.8CVSS5.8AI score0.00345EPSS
SaveExploits0References3
Prion
Prion
•added 2018/03/12 5:29 p.m.•25 views

Hardcoded credentials

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

7.2CVSS7.6AI score0.00345EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2018/03/12 5:29 p.m.•25 views

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

7.8CVSS7.7AI score0.00345EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/03/12 5:00 p.m.•36 views

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

7.7AI score0.00345EPSS
SaveExploits0References3
CVE
CVE
•added 2018/03/12 5:00 p.m.•73 views

CVE-2018-1206

Dell EMC Data Protection Advisor is affected by CVE-2018-1206 in versions prior to 6.3 Patch 159 and prior to 6.4 Patch 110, due to a hardcoded admin database account named apollosuperuser. A local attacker with server access and knowledge of this password could gain unauthorized access to the Da...

7.8CVSS7.6AI score0.00345EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2018/03/12 12:00 a.m.•4 views

PT-2018-10978

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 Description The issue concerns a hardcoded database account with administrative privileges, specifically the...

7.8CVSS0.00345EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/12 12:00 a.m.•5 views

CVE-2018-1206: Use of Hard-coded Credentials

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

7.8CVSS7.2AI score0.00345EPSS
SaveExploits0References2
Broadcom
Broadcom
•added 2018/02/26 12:00 a.m.•27 views

BSA-2018-564

Security Advisory ID : BSA-2018-564 Component : Oracle Java Revision : 1.1: update The January 2018 Critical Patch Update provides security updatesfor certain Oracle Java Platform software libraries. Java SE JDK and JRE versions through 6u171, 7u161, 8u152, and 9.0.1 are affected by vulnerabiliti...

8.3CVSS8.8AI score0.07525EPSS
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
•added 2018/02/12 5:00 p.m.•35 views

Cyber resilience for the modern enterprise

Many organizations are undergoing a digital transformation that leverages a mix of cloud and on-premises assets to increase business efficiency and growth. While increased dependence on technology is necessary for this transformation, and to position the business for success, it does pose risks...

7.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/01/31 12:00 a.m.•37 views

EMC Data Protection Advisor Application Service Static Credentials Authentication Bypass (CVE-2017-8013)

A static credentials authentication bypass vulnerability exists in the EMC Data Protection Advisor Application service...

7.5CVSS3.8AI score0.02131EPSS
SaveExploits1
Rows per page
Query Builder