ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC Identifier: ESA-2015-056 CVE Identifier: CVE-2015-0529 Severity Rating: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N Affected products: • EMC PowerPath...

CVE-2015-0529

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...