EUVD-2015-0538

Malware in sbrugna...

EUVD-2015-0537

Malware in sbrugna...

EUVD-2015-0557

Malware in sbrugna...

EUVD-2015-6788

Malware in sbrugna...

EUVD-2018-3123

Malware in sbrugna...

PT-2018-10290

Name of the Vulnerable Software and Affected Versions Dell EMC Secure Remote Services versions prior to 3.32.00.08 Description The issue concerns the storage of database credentials in plaintext within a configuration file. This allows an authenticated malicious user with access to the...

CVE-2018-11079: Insufficiently Protected Credentials

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain...

CVE-2018-15765: Exposure of Sensitive Information to an Unauthorized Actor

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication token...

PT-2018-13191

Name of the Vulnerable Software and Affected Versions Dell EMC Secure Remote Services versions prior to 3.32.00.08 Description The issue allows for information exposure, where log file contents store sensitive data, including executed commands used to generate authentication tokens. This sensitiv...

PT-2018-10292

Name of the Vulnerable Software and Affected Versions Dell EMC Secure Remote Services versions prior to 3.32.00.08 Description The issue is related to improper file permissions in configuration files. These files have world-readable permissions, which could allow an authenticated malicious user t...

CVE-2018-11080: Incorrect Permission Assignment for Critical Resource

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially...

EMC Secure Remote Services Webinterface Detection

This script performs HTTP based detection of EMC Secure Remote Services Webinterface SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

EMC Secure Remote Services Detection

This script performs SSH based detection of EMC Secure Remote Services SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Directory traversal

Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter...

CVE-2015-6852

CVE-2015-6852 affects EMC Secure Remote Services Virtual Edition 3.x prior to 3.10. The API is vulnerable to a directory traversal issue that allows remote authenticated users to read log files via a crafted parameter. The vulnerability is described in multiple sources (NVD/CNVD) with a CVSS v3 b...

PT-2015-7392

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition versions 3.x before 3.10 Description The issue allows remote authenticated users to read log files via a crafted parameter due to a directory traversal vulnerability in the API. Recommendations For...

CVE-2015-6852: Exposure of Sensitive Information to an Unauthorized Actor

Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter...

Insufficient certificate validation in EMC Secure Remote Services Virtual Edition

------------------------------------------------------------------------ Insufficient certificate validation in EMC Secure Remote Services Virtual Edition ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC Secure Remote Services Virtual Edition multiple security vulnerabilities

Code execution, SQL injection, buffer overflow...

Design/Logic Flaw

EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...