86 matches found
Default Password (rain) for 'root' Account
The account 'root' on the remote host has the password 'rain'. An attacker may leverage this to gain access, likely as an administrator, to the affected system. Note that EMC Cloud Tiering Appliance is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
EMC Cloud Tiering Appliance XML External Entity (XXE) Arbitrary File Disclosure
The remote EMC Cloud Tiering Appliance CTA install is affected by an arbitrary file disclosure vulnerability. It is possible to view any file on the system by utilizing XML external entity injection in specially crafted XML data sent to the REST service on the remote host. Note that hosts that ar...
EMC Cloud Tiering Appliance (CTA) XML外部实体注入漏洞
Bugtraq ID:66547 EMC Cloud Tiering Appliance能够协助存储管理人员有效简单的管理以档案为单位的非结构性数据。 EMC Cloud Tiering Appliance在解析XML数据时存在输入验证漏洞可导致XML注入漏洞，允许攻击者提交特殊的POST请求，获取敏感信息。 0 EMC Cloud Tiering Appliance CTA 10.0 目前没有详细解决方案： http://china.emc.com/archiving/cloud-tiering-appliance.htm POST /api/login HTTP/1.1 Host:...
EMC Cloud Tiering Appliance v10.0 Unauthenticated XXE Arbitrary File Read
EMC Cloud Tiering appliance version 10.0 suffers from an unauthenticated XXE injection vulnerability. Metasploit module proof of concept is included. EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host:...
EMC Cloud Tiering Appliance 10.0 Unauthenticated XXE Arbitrary File Read Vulnerability - Active Check
EMC Cloud Tiering Appliance CTA is susceptible to an unauthenticated XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
EMC Cloud Tiering Appliance 10.0 XXE Injection
EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...
EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit)
EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read Metasploit EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664;...
EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit)
EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...
CVE-2012-2285
EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...
Authentication flaw
EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...
CVE-2012-2285
EMC Cloud Tiering Appliance aka CTA, formerly FMA 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition CTA/VE 9.0 and earlier, allows remote attackers to obtain GUI administrative access by sending a crafted file during the authentication phase...
CVE-2012-2285
CVE-2012-2285 affects EMC Cloud Tiering Appliance (CTA) and CTA/VE versions up to 9.0 that allow remote attackers to obtain GUI administrative access by sending a crafted file during authentication. The root cause is an authentication bypass that can grant full GUI admin privileges, as detailed i...
EMC Cloud Tiering Appliance authentication bypass
Authentication bypass is possible...
ESA-2012-034: EMC Cloud Tiering Appliance (CTA) Authentication Bypass Vulnerability
ESA-2012-034.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-034: EMC Cloud Tiering Appliance CTA Authentication Bypass Vulnerability EMC Identifier: ESA-2012-034 CVE Identifier: CVE-2012-2285 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC...
Azure File Sync Agent v15 Release – March 2022
None None...
Azure File Sync Agent v17 Release - December 2023
None None...
Azure File Sync Agent v9 Release – December 2019
None None...
Azure File Sync Agent v11.1 Release – November 2020
None None...