CVE-2013-3277: Improper Input Validation

Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2013-4273

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC versions prior to 5.4 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations For versions prior to 5.4, update to version 5.4 or later...

PT-2013-4272

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC versions 5.x before 5.4 Description The issue allows remote authenticated users to bypass intended access restrictions and complete a login by leveraging a deactivated account. Recommendations For versions 5.x before 5.4,...

CVE-2013-3276: Undefined Security Weakness

EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete a login by leveraging a deactivated account...

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

CVE-2013-3271

CVE-2013-3271 affects EMC RSA Authentication Agent for PAM 7.0 and earlier (up to 7.0.2.0) where login-attempt limiting is implemented in the PAM-enabled application code rather than in the RSA Agent itself. This design allows brute-force attempts against login credentials. The issue is documente...

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

CVE-2013-3271: Undefined Security Weakness

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

PT-2013-4267

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent for PAM version 7.0 through 7.0.2.0 Description The issue makes it easier for remote attackers to discover correct login credentials via a brute-force attack because the maximum number of login attempts is enforced...

EMC AlphaStor Library Control Program Multiple Buffer Overflows (CVE-2013-0946)

Multiple buffer overflow vulnerabilities has been reported in EMC AlphaStor Library Control Program LCP...

CVE-2013-0943

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin...

Design/Logic Flaw

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin...

CVE-2013-0943

CVE-2013-0943 affects EMC NetWorker 7.6.x and 8.x prior to 8.1. A privileged local user can leverage the nsradmin utility under OS privileges to decrypt data and obtain sensitive configuration information, yielding a confidential data disclosure vulnerability. The root cause centers on how nsradm...

CVE-2013-0943

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin...

CVE-2013-0943: Exposure of Sensitive Information to an Unauthorized Actor

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin...

PT-2013-2737

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.6.x through 8.0 Description The issue allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with the nsradmin function. Recommendations For EMC...

KLA10146 OSI vulnerability in EMC NetWorker

An unspecified vulnerability was found in EMC NetWorker. By exploiting this vulnerability malicious users can obtain configuration information. This vulnerability can be exploited locally. Original advisories - Exploitation Related products EMC-NetWorker CVE list CVE-2013-0943 warning Solution...

EMC NetWorker information leakage

It's possible to retrieve sensible configuration information...

ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability

ESA-2013-033.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability EMC Identifier: ESA-2013-033 EMC Identifier: NW144712 CVE Identifier: CVE-2013-0943 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products...

CVE-2013-3275

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilitie...