81 matches found
CVE-2023-48660
Dell Virtual Appliance Manager (Dell vApp Manger) is affected by CVE-2023-48660. The vulnerability exists in versions prior to 9.2.4.x and allows a remote attacker to read arbitrary files from the target system, impacting confidentiality. The CVSS from NVD/EU sources indicates network access, low...
PT-2023-30891 · Dell · Dell Vapp Manager
Name of the Vulnerable Software and Affected Versions: Dell vApp Manager versions prior to 9.2.4.x Description: A remote attacker could potentially exploit this issue to obtain sensitive information, which may aid in further attacks. This is an information disclosure vulnerability. Recommendation...
PT-2023-30883 · Dell · Dell Vapp Manager
Name of the Vulnerable Software and Affected Versions: Dell vApp Manager versions prior to 9.2.4.x Description: The issue allows a remote malicious user with high privileges to potentially exploit it and read arbitrary files from the target system. Recommendations: For versions prior to 9.2.4.x,...
The vulnerability of the vApp Manager component in corporate storage and data management systems like VMAX EMC Unisphere, EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, EMC VMAX Embedded Management allows a malicious actor to gain unauthorized access to the system.
The vulnerability of the vApp Manager component VMAX Virtual Appliance Manager in corporate storage and data management systems like VMAX EMC Unisphere, EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and EMC VMAX Embedded Management eManagement is related to the use of pre-installed...
Unauthorized Access Vulnerability in vApp Manager for Multiple Dell Products
Dell EMC Unisphere for VMAX Virtual Appliance and so on are products of Dell Inc. in the United States. the Dell EMC Unisphere for VMAX Virtual Appliance vApp is a management tool for VMAX storage arrays. the EMC Solutions Enabler Virtual Appliance is a Solutions Enabler Virtual Appliance. vApp...
Design/Logic Flaw
An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
CVE-2018-1215
An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
CVE-2018-1215
An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
CVE-2018-1216
A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
CVE-2018-1215
An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...
CVE-2018-1215
Dell EMC VMAX VApp Manager (and related appliances: Unisphere for VMAX Virtual Appliance, Solutions Enabler Virtual Appliance, VASA Virtual Appliance, and VMAX Embedded Management) is affected by CVE-2018-1215, a directory traversal/arbitrary file upload vulnerability in the vApp Manager. The iss...
EMC vApp Manager Default Credentials
The EMC vApp Manager web application running on the remote host uses a default set of credentials 'smc' / 'smc'. An unauthenticated, remote attacker can exploit this issue to authenticate to the application and perform actions allowed by the default account. Specifically, the attacker can login a...
Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems
Dell EMC fixed two critical flaws in its management interfaces for its VMAX enterprise storage systems. One of the vulnerabilities could allow a remote attacker to use a hard-coded password to a default account to gain unauthorized access to systems. The company issued updates that address the tw...
EMC VMAX Virtual Appliance (vApp) Authentication Bypass Vulnerability
The vApp Manager which is embedded in EMC Unisphere for VMAX, Solutions Enabler, VASA Virtual Appliances, and EMC VMAX Embedded Management eManagement contains an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system. Affected...
EMC VMAX VASA Provider Virtual Appliance < 8.4.0 File Upload RCE
The version of EMC VMAX VASA Provider Virtual Appliance running on the remote host is prior to 8.4.0. It is, therefore, affected by a remote code execution vulnerability in the UploadConfigurator servlet due to a failure to restrict file uploads to arbitrary directories. An unauthenticated, remot...
EMC vApp Manager Detection
Binary data emcvappmanagerdetect.nbin...
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance Arbitrary Command Execution Vulnerability
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance are both products of EMC. The former is a set of VMAX virtual storage series of management equipment, the latter is a set of solutions application virtual appliance. vApp Managers web application is one of the Web...
The vulnerability of the EMC Unisphere data storage management program allows a hacker to modify arbitrary files.
The vulnerability of the HTTP server of the vApp Manager component in the EMC Unisphere data management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to modify arbitrary files through a specially crafted path name...
EMC Unisphere for VMAX vApp Manager Arbitrary File Write Vulnerability
EMC Unisphere for VMAX is a set of management interfaces for the VMAX storage family from EMC Corporation USA. An arbitrary file write vulnerability exists in the HTTP servlet in vApp Manager in EMC Unisphere for VMAX versions prior to 8.2.0, which can be exploited by a remote attacker to write...