CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 enables the Java Debug Wire Protocol (JDWP) service, which could allow remote attackers to execute arbitrary code. Affected products are EMC Unisphere for VMAX 8.0.x prior to 8.0.3.4; EMC’s security advisory and related CVE records confirm this is a remot...

ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability EMC Identifier: ESA-2015-102 CVE Identifier: CVE-2015-0545 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC Unisphere for VMAX 8.0.0 ...

EMC Unisphere for VMAX code execution

JDWP access is possible...

EMC Unisphere for VMAX Remote Code Execution Vulnerability

EMC Unisphere for VMAX is the advanced graphical user interface. EMC Unisphere for VMAX with the JDWP service enabled enables an unauthenticated attacker to execute arbitrary code on the affected system...

ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability

ESA-2013-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability EMC Identifier: ESA-2013-074 CVE Identifier: CVE-2013-3287 Severity Rating: CVSS v2 Base Score: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected products • EMC Unisphere...

EMC Unisphere for VMAX information leakage

Under some conditions cleartext password is logged...

CVE-2013-3287

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

Default credentials

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2013-3287

EMC Unisphere for VMAX prior to version 1.6.1.6 is affected. If an unspecified level of LDAP debug logging is enabled, local users can read the LDAP bind password in cleartext from the console output. Remediation shown across sources: upgrade to Unisphere for VMAX 1.6.1.6 and/or change the LDAP b...

CVE-2013-3287

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

VMAX Web Viewer Default Credentials (HTTP)

VMAX Web Viewer is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...