EUVD-2017-14089

Malware in sbrugna...

PT-2018-13190

Name of the Vulnerable Software and Affected Versions Dell EMC ESRS Policy Manager versions 6.8 and prior Description The issue is related to a remote code execution vulnerability caused by improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploi...

CVE-2018-15764: Undefined Security Weakness

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM...

Default credentials

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

CVE-2017-4976

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

PT-2017-16239

Name of the Vulnerable Software and Affected Versions EMC ESRS Policy Manager versions prior to 6.8 Description The issue concerns an undocumented account, specifically the OpenDS admin, which has a default password. This allows a remote attacker who knows the default password to log in and gain...

CVE-2017-4976: Use of Hard-coded Credentials

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...