ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability

ESA-2013-072.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability EMC Identifier: ESA-2013-072 EMC Identifier: NW152441 CVE Identifier: CVE-2013-3285 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products...

ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability

ESA-2013-094.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-094: EMC Data Protection Advisor JBOSS Remote Code Execution Vulnerability EMC Identifier: ESA-2013-094 CVE Identifier: CVE-2012-0874 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: • A...

ESA-2013-092: EMC Replication Manager Unquoted File Path Enumeration Vulnerability

ESA-2013-092.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-092: EMC Replication Manager Unquoted File Path Enumeration Vulnerability EMC Identifier: ESA-2013-092 CVE Identifier: CVE-2013-6182 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC...

ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities

ESA-2013-089.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-089: EMC Connectrix Manager Converged Network Edition Remote Code Execution Vulnerabilities EMC Identifier: ESA-2013-089 CVE Identifier: CVE-2013-6810 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C...

EMC Replication Manager文件路径处理本地权限提升漏洞

Bugtraq ID:64520 CVE ID:CVE-2013-6182 EMC Replication Manager是一款通过统一的管理控制台管理复制技术并协调整个数据复制过程的解决方案。 EMC Replication Manager允许在文件路径中包含未加引号元素的脚本，允许用户创建包含空格或其他分隔符元素的脚本，可访问父路径中的资源并执行，可提升权限。 0 EMC Replication Manager 厂商补丁： EMC ----- EMC Replication Manager 5.5.0已经修复该漏洞，建议用户下载更新：...

CVE-2013-6182

Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory...

CVE-2013-6181

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

Directory traversal

Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory...

Design/Logic Flaw

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

CVE-2013-6181

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

CVE-2013-6182

Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory...

CVE-2013-6181

EMC Watch4Net is affected by CVE-2013-6181 in versions prior to 6.3. The vulnerability stems from storing device passwords in cleartext within the installation repository, allowing a local attacker with repository access to view sensitive credentials. The EMC security advisory confirms the remedi...

CVE-2013-6182

EMC Replication Manager prior to version 5.5 is affected by an unquoted file-path vulnerability that allows local privilege escalation via crafted scripts that reside in a parent directory of a target path. The root cause is unquoted elements in file paths used by user-created scripts, enabling a...

CVE-2013-6182: Undefined Security Weakness

Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory...

CVE-2013-6181: Undefined Security Weakness

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...

PT-2013-5965

Name of the Vulnerable Software and Affected Versions EMC Watch4Net versions prior to 6.3 Description The issue allows local users to obtain sensitive information by accessing cleartext polled-device passwords stored in the installation repository. This is possible when a user has repository...

PT-2013-5966

Name of the Vulnerable Software and Affected Versions EMC Replication Manager versions prior to 5.5 Description The issue allows local users to gain privileges through a crafted application in a parent directory of an intended directory, due to an unquoted Windows search path vulnerability...

CVE-2013-6178

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6178

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...