Hardcoded credentials

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-14376

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-14376

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-14376

CVE-2017-14376 affects EMC AppSync Server prior to 3.5.0.1. The vulnerability arises from hardcoded database passwords for accounts, specifically the administrative-privilege accounts (e.g., apollosuperuser and apollouser). An attacker with local access to the AppSync PostgreSQL database and know...

CVE-2017-14376

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system...

EMC AppSync Server Hardcoded Password Vulnerability

EMC AppSync contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system. Versions prior to 3.5.0.1 are affected. EMC AppSync Hardcoded Password Vulnerability CVE Identifier: CVE-2017-14376 Severity Rating: CVSS v3 Ba...

CVE-2017-8018

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8018

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Denial of service

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8018

Affected product : EMC AppSync Host Plug-in (Windows) v3.5 and earlier. Vulnerability : Denial of Service (DoS) in the host plug‑in that could be exploited by a remote attacker to compromise the affected system. Root cause/impact : DoS as described in CVE-2017-8018; CVSS metrics from NVD indicate...

CVE-2017-8018

EMC AppSync host plug-in versions 3.5 and below Windows platform only includes a denial of service DoS vulnerability that could potentially be exploited by malicious users to compromise the affected system...

EMC AppSync Host Plug-in Denial of Service Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, Service Level Agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage.Host Plug-in is one of the host plug-ins. A denial of service...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Sql injection

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync all versions prior to 3.5 contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8015

EMC AppSync (pre-3.5) contains an SQL injection in the Apollo REST services. The flaw arises when parsing a user-supplied string to build SQL queries, enabling information disclosure on vulnerable installations. The vulnerability allows remote attackers to disclose sensitive data; authentication ...

EMC AppSync Apollo REST Services SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Appsync. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within Apollo REST...

EMC AppSync SQL Injection Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, service-level agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage. A SQL injection vulnerability exists in versions of EMC AppSync prio...

ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-179: EMC Replication Manager and EMC AppSync Unquoted Service Path Enumeration Vulnerability EMC Identifier: ESA-2014-179 CVE Identifier: CVE-2014-4634 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: EMC...