CVE-2016-6648

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

Information disclosure

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

CVE-2016-6648

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2016-6649

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

CVE-2016-6648

Affected software : EMC RecoverPoint (before 4.4.1.1) and EMC RecoverPoint for Virtual Machines (before 5.0). Vulnerability : Local information disclosure due to incorrect permissions on a sensitive system file. Actor/Trigger : A malicious administrator with configuration privileges can access th...

CVE-2016-6648

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2016-6649

EMC RecoverPoint and RecoverPoint for Virtual Machines are affected by multiple command injection vulnerabilities in versions prior to 4.4.1.1 and 5.0 respectively. A malicious administrator with configuration privileges can bypass the UI and escalate to root privileges. Root cause: command injec...

CVE-2016-6648: Undefined Security Weakness

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2016-6649: Improper Neutralization of Special Elements used in a Command

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...

ESA-2015-115: EMC RecoverPoint for Virtual Machines (VMs) Restriction Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-115: EMC RecoverPoint for Virtual Machines VMs Restriction Bypass Vulnerability EMC Identifier: ESA-2015-115 CVE Identifier: CVE-2015-4526 Severity Rating: CVSSv2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC RecoverPoin...

EMC RecoverPoint for Virtual Machines restriction bypass

Privilege escalation...

EMC RecoverPoint for Virtual Machines Privileged Access Vulnerability

EMC RecoverPoint for Virtual Machines VMs is a disaster recovery solution for VMware environments from EMC. The solution provides local and remote hypervisor-based replication, continuous data protection by VM recovery to any point in time, and automated disaster recovery process orchestration. A...

CVE-2015-4526

EMC RecoverPoint for Virtual Machines VMs 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface...

Design/Logic Flaw

EMC RecoverPoint for Virtual Machines VMs 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface...

CVE-2015-4526

EMC RecoverPoint for Virtual Machines (VMs) 4.2 is affected by a local privilege escalation where an attacker can bypass the Installation Manager Boxmgmt CLI interface to gain root-shell access. The issue is reported for version 4.2 and is described as a restriction bypass that enables command ex...

CVE-2015-4526

EMC RecoverPoint for Virtual Machines VMs 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface...

CVE-2015-4526: Improper Access Control

EMC RecoverPoint for Virtual Machines VMs 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface...

PT-2015-6606

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines VMs version 4.2 Description The issue allows local users to bypass the Installation Manager Boxmgmt CLI interface, resulting in root-shell access. Recommendations For version 4.2, at the moment, there is n...

ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-087: EMC NetWorker Module for MEDITECH NMMEDI Information Disclosure Vulnerability EMC Identifier: ESA-2014-087 CVE Identifier: CVE-2014-4620 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC NetWork...