EMC Data Protection Advisor BaseRestEntityResource orderby SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of EMC Data Protection Advisor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...

PT-2017-18060

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions prior to 6.4 Description The issue allows a remote authenticated attacker to potentially gain information about the application by executing arbitrary SQL commands due to multiple blind SQL injection...