CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Sql injection

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync (pre-3.5) contains an SQL injection in the Apollo REST services. The flaw arises when parsing a user-supplied string to build SQL queries, enabling information disclosure on vulnerable installations. The vulnerability allows remote attackers to disclose sensitive data; authentication ...

EMC AppSync Apollo REST Services SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Appsync. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within Apollo REST...

EMC AppSync SQL Injection Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, service-level agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage. A SQL injection vulnerability exists in versions of EMC AppSync prio...

ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability EMC Identifier: ESA-2014-179 CVE Identifier: CVE-2014-4634 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC...

EMC Replication Manager / EMC AppSync privilege escalation

Registry path is stored without quotes...

EMC Replication Manager/AppSync Local Elevation of Privilege Vulnerability

EMC Replication Manager is a solution that manages replication technology and coordinates the entire data replication process through a unified management console. A local elevation of privilege vulnerability exists in EMC Replication Manager/AppSync, which can be exploited by a local attacker to...

CVE-2014-4634

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

Design/Logic Flaw

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-4634

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

CVE-2014-4634

CVE-2014-4634 describes an unquoted Windows search path vulnerability in EMC Replication Manager (pre-5.5.2) and EMC AppSync (pre-2.1.0). The underlying issue is an unquoted service path used by Windows services, enabling a local attacker to abuse a Trojan horse executable whose name starts with ...