CVE-2017-2767: Improper Authentication

EMC Network Configuration Manager NCM 9.3.x, EMC Network Configuration Manager NCM 9.4.0.x, EMC Network Configuration Manager NCM 9.4.1.x, EMC Network Configuration Manager NCM 9.4.2.x contains a Java RMI Remote Code Execution vulnerability that could potentially be exploited by malicious users t...

PT-2017-7666

Name of the Vulnerable Software and Affected Versions EMC PowerPath Virtual Management Appliance version 2.0 EMC PowerPath Virtual Management Appliance version 2.0 SP1 Description The issue is related to a sensitive information disclosure that could potentially be exploited by malicious users to...

CVE-2016-8211: Improper Limitation of a Pathname to a Restricted Directory

EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the...

CVE-2016-8217: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS12 file to the toolkit and...

CVE-2016-6648: Undefined Security Weakness

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

PT-2017-10370

Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 7.1.0.x through 7.1.1.10 EMC Isilon OneFS versions 7.2.0.x through 7.2.1.3 Description A privilege escalation issue affects the system, potentially allowing attackers to compromise it. Recommendations For versions...

PT-2017-9007

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint versions prior to 4.4.1.1 EMC RecoverPoint for Virtual Machines versions prior to 5.0 Description The issue allows a malicious administrator with configuration privileges to bypass the user interface and escalate privileges to...

CVE-2016-6649: Improper Neutralization of Special Elements used in a Command

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

PT-2017-9006

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint versions prior to 4.4.1.1 EMC RecoverPoint for Virtual Machines versions prior to 5.0 Description The issue is caused by incorrect permissions set on a sensitive system file, leading to sensitive information disclosure. A...

PT-2017-9530

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 6.1.x through 6.2.3 prior to patch 446 Description The issue is related to a path traversal vulnerability that could potentially be exploited by malicious users to compromise the affected system. This...

CVE-2016-9871: Undefined Security Weakness

EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system...

PT-2017-15528

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions prior to 7.4.5 P04 EMC Documentum eRoom versions prior to 7.5.0 P01 Description The issue concerns an unverified password change that could potentially be exploited by malicious users to compromise the affected...

EMC Documentum D2 4.5.x and 4.6.x < 4.7 Multiple Vulnerabilities (ESA-2016-167)

The remote host is running a version of EMC Documentum D2 that is 4.5.x or 4.6.x prior to 4.7. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can...

EMC Avamar ADS / AVE 7.3.0.x < 7.3.0 Hotfix 268253 / 7.3.1.x < 7.3.1 Hotfix 272363 Incorrect File Ownership Local Privilege Escalation (ESA-2016-146)

According to its self-reported version number, the EMC Avamar Data Store ADS or Avamar Virtual Edition AVE software running on the remote host is a version prior to 7.3.0 Hotfix 268253 7.3.0.233 or prior to 7.3.1 Hotfix 272363 7.3.1.125. It is, therefore, affected by a local privilege escalation...

EMC Isilon OneFS Privilege Escalation Vulnerability

EMC Isilon OneFS is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Dell EMC Isilon InsightIQ Authentication Bypass Vulnerability (Feb 2017)

Dell EMC Isilon InsightIQ is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2017-3138

Name of the Vulnerable Software and Affected Versions EMC Network Configuration Manager NCM versions 9.3.x through 9.4.2.x Description The issue is related to a Java RMI Remote Code Execution vulnerability. It could potentially be exploited by malicious users to compromise the affected system. Th...

PT-2017-3137

Name of the Vulnerable Software and Affected Versions EMC Network Configuration Manager NCM versions 9.3.x through 9.4.2.x Description The issue is related to an Improper Authentication vulnerability. This vulnerability could potentially be exploited by malicious users to compromise the affected...

EMC Data Domain OS Local Command Injection Vulnerability (ESA-2016-160)

EMC Data Domain OS is prone to a local command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dell PowerProtect Data Domain Detection (SSH Login)

SSH login-based detection of Dell PowerProtect Data Domain. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...