ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC Identifier: ESA-2015-056 CVE Identifier: CVE-2015-0529 Severity Rating: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N Affected products: • EMC PowerPath...

EMC PowerPath Virtual Appliance Information Disclosure Vulnerability

EMC PowerPath Virtual Appliance aka vApp is a host-based path optimization software from EMC. The software provides automated data path management, failover and recovery, and load balancing optimization in both physical and virtual environments. A security vulnerability exists in EMC PowerPath...

CVE-2015-0529

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

Default credentials

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

CVE-2015-0529

EMC PowerPath Virtual Appliance (vApp) prior to version 2.0 is vulnerable due to undocumented accounts emcupdate and svcuser protected by default passwords, enabling potential information disclosure via login sessions. Affected product/version: EMC PowerPath Virtual Appliance (vApp) before 2.0. R...

CVE-2015-0529

EMC PowerPath Virtual Appliance aka vApp before 2.0 has default passwords for the 1 emcupdate and 2 svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session...

Unable to add DataDomain DDBoost repository connected over Fibre Channel

Challenge When adding DataDomain as a backup repository using DDBoost over Fibre Channel, the following error is shown: Failed to connect to 'DFC-'. --tr:Unable to initialize Data Domain connection. --tr:Failed to call DoRpc. CmdName: DDBoostCheckConnection. invalid argument. Err: 5008 Failed to...

ESA-2011-001: RSA, The Security Division of EMC, addresses RKM 1.5 C Client SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-001: RSA, The Security Division of EMC, addresses RKM 1.5 C Client SQL Injection Vulnerability Security Advisory Updated January 13, 2011 Summary: The vulnerability that was identified in the RSA Key Manager RKM C client 1.5 which may expose...

Low: Red Hat Bug Fix Advisory: Updated lvm package

An updated lvm package that includes a number of bug fixes and enhancements is now available for the latest Red Hat Enterprise Linux Update 3 kernel release. LVM includes all of the support for handling read/write operations on physical volumes, creating volume groups from one or more physical...