PT-2012-5520

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor DPA versions 5.6 through 5.8 SP4 Description A directory traversal issue in the Web UI of EMC Data Protection Advisor allows remote attackers to read arbitrary files. Recommendations For versions 5.6 through 5.8 SP4...

CVE-2012-4616: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor DPA 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors...

EMC Avamar 6.1.100-402 File Overwrite

Product: Avamar backup client for Linux Proberly also Unix but not tested Vendor: EMC http://www.emc.com Tested version: 6.1.100-402 Latest Vendor Notification: December 17, 2012 Vender Patch: None Vender Workaround: workaround is to run a script at the end of each backup which set the files...

CVE-2012-4608

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4609

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Code injection

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4609

CVE-2012-4609 affects RSA NetWitness Informer web interface prior to version 2.0.5.6. The issue is a clickjacking vulnerability in the web interface that could be exploited via unspecified vectors to trick an authenticated user into executing actions. The ESA-2012-052 advisory and Red Hat/Securit...

CVE-2012-4608

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4608

CVE-2012-4608 refers to a CSRF vulnerability in the web interface of EMC RSA NetWitness Informer prior to version 2.0.5.6. The flaw could allow an attacker to hijack the authentication of an authenticated user through cross-site requests. Affected product: RSA NetWitness Informer web interface; a...

CVE-2012-4609

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2012-4608: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4609: Improper Input Validation

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

EMC NetWorker nsrd Stack Buffer Overflow (CVE-2012-2288)

A stack buffer overflow vulnerability has been reported in EMC NetWorker...

PT-2012-5513

Name of the Vulnerable Software and Affected Versions EMC RSA NetWitness Informer versions prior to 2.0.5.6 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors, affecting the web interface. Recommendations For versions prior to 2.0.5.6, update to...

PT-2012-5512

Name of the Vulnerable Software and Affected Versions EMC RSA NetWitness Informer versions prior to 2.0.5.6 Description A cross-site request forgery CSRF issue exists in the web interface, allowing remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prio...

EMC Smarts Network Configuration Manager security vulnerabilities

Hardcoded ecnryption key, default unauthenticated connections...

ESA-2012-054: RSA ® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerabilities

ESA-2012-054.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-054: RSA ® Adaptive Authentication On-Premise Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2012-054 CVE Identifier: CVE-2012-4611 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected...

ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities

ESA-2012-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities EMC Identifier: ESA-2012-057 CVE Identifier: CVE-2012-4614 CVE Identifier: CVE-2012-4615 Severity Rating: CVSS v2 Base Score: See below for individual...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Adaptive Authentication On-Premise AAOP before 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...