CVE-2015-6852: Exposure of Sensitive Information to an Unauthorized Actor

Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter...

PT-2015-7392

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition versions 3.x before 3.10 Description The issue allows remote authenticated users to read log files via a crafted parameter due to a directory traversal vulnerability in the API. Recommendations For...

CVE-2015-0543

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-4706

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.x before 3.06 Description The issue is related to the improper verification of X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain...

PT-2015-4707

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.x before 3.06 Description The issue is related to the generation of random values for session cookies. Due to improper generation, it becomes easier for remote attackers to hijack...

CVE-2015-0544: Undefined Security Weakness

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value...

CVE-2015-0543: Improper Input Validation

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Command injection vulnerability in EMC Secure Remote Services Virtual Edition

------------------------------------------------------------------------ Command injection vulnerability in EMC Secure Remote Services Virtual Edition ------------------------------------------------------------------------ Han Sahin, November 2014...

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0525: Improper Neutralization of Special Elements used in an OS Command

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

PT-2015-4689

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.02 through 3.03 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 3.02 and 3.03, at the moment, there is no information...

CVE-2015-0524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...