EUVD-2017-14099

Malware in sbrugna...

EUVD-2017-14089

Malware in sbrugna...

Dell EMC ESRS Policy Manager Remote Code Execution Vulnerability

Dell EMC ESRS is a secure remote support service program from Dell. and Policy Manager can set permissions for client-managed devices. A remote code execution vulnerability exists in Dell EMC ESRS Policy Manager. An attacker could exploit the vulnerability to execute arbitrary code in an affected...

CVE-2018-15764

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM...

CVE-2018-15764: Undefined Security Weakness

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM...

PT-2018-13190

Name of the Vulnerable Software and Affected Versions Dell EMC ESRS Policy Manager versions 6.8 and prior Description The issue is related to a remote code execution vulnerability caused by improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploi...

Default credentials

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

CVE-2017-4976

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

CVE-2017-4976

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

CVE-2017-4976: Use of Hard-coded Credentials

EMC ESRS Policy Manager prior to 6.8 contains an undocumented account OpenDS admin with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server...

PT-2017-16239

Name of the Vulnerable Software and Affected Versions EMC ESRS Policy Manager versions prior to 6.8 Description The issue concerns an undocumented account, specifically the OpenDS admin, which has a default password. This allows a remote attacker who knows the default password to log in and gain...

Authentication flaw

EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4986

EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-4986: Exposure of Sensitive Information to an Unauthorized Actor

EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system...

PT-2017-16247

Name of the Vulnerable Software and Affected Versions EMC ESRS VE versions 3.18 or earlier Description The issue allows malicious users to bypass authentication, potentially compromising the affected system. Recommendations For versions 3.18 or earlier, update to a version later than 3.18 to...