123 matches found
EMC VMAX VASA Provider Virtual Appliance File Upload RCE
The EMC VMAX VASA Provider Virtual Appliance running on the remote host is affected by a remote code execution vulnerability in the UploadConfigurator servlet due to a failure to restrict file uploads to arbitrary directories. An unauthenticated, remote attacker can exploit this issue to upload...
EMC VMAX VASA Provider Virtual Appliance < 8.4.0 File Upload RCE
The version of EMC VMAX VASA Provider Virtual Appliance running on the remote host is prior to 8.4.0. It is, therefore, affected by a remote code execution vulnerability in the UploadConfigurator servlet due to a failure to restrict file uploads to arbitrary directories. An unauthenticated, remot...
EMC Unisphere for VMAX Virtual Appliance 8.x < 8.3.0 RCE
The version of EMC Unisphere for VMAX Virtual Appliance running on the remote host is 8.x prior to 8.3.0. It is, therefore, affected by multiple vulnerabilities : - Multiple flaws exist in the web interface related to the GeneralCmdRequest, PersistantDataRequest, and GetCommandExecRequest classes...
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance Arbitrary Command Execution Vulnerability (CNVD-2016-08762)
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance are both products of EMC. The former is a set of VMAX virtual storage series of management equipment, the latter is a set of solutions application virtual appliance. vApp Managers web application is one of the Web...
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance Arbitrary Command Execution Vulnerability
EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance are both products of EMC. The former is a set of VMAX virtual storage series of management equipment, the latter is a set of solutions application virtual appliance. vApp Managers web application is one of the Web...
CVE-2016-6646
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...
CVE-2016-6645
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...
CVE-2016-6645
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...
Design/Logic Flaw
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...
Design/Logic Flaw
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...
CVE-2016-6645
The CVE-2016-6645 entry applies to EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance 8.x prior to 8.3.0. The vulnerability stems from the vApp Manager’s web interface, where crafted input to GeneralCmdRequest, PersistantDataRequest, or GetCommandExecRequest allows a...
CVE-2016-6646
The CVE-2016-6646 entry concerns EMC Unisphere for VMAX Virtual Appliance (vApp Manager) and Solutions Enabler Virtual Appliance. Affects 8.x releases prior to 8.3.0 where the vApp Manager web application processes crafted input via GetSymmCmdRequest or RemoteServiceHandler classes, enabling remo...
CVE-2016-6646
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...
CVE-2016-6645
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...
CVE-2016-6646: Improper Input Validation
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...
CVE-2016-6645: Improper Input Validation
The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the 1 GeneralCmdRequest, 2 PersistantDataRequest, or 3...
PT-2016-7018
Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX Virtual Appliance versions 8.0 through 8.2 Solutions Enabler Virtual Appliance versions 8.0 through 8.2 Description The issue allows remote authenticated users to execute arbitrary code via crafted input to the 1...
PT-2016-7019
Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX Virtual Appliance versions 8.0 through 8.2 Solutions Enabler Virtual Appliance versions 8.0 through 8.2 Description The issue allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest...
EMC Unisphere for VMAX vApp Manager Arbitrary File Write Vulnerability
EMC Unisphere for VMAX is a set of management interfaces for the VMAX storage family from EMC Corporation USA. An arbitrary file write vulnerability exists in the HTTP servlet in vApp Manager in EMC Unisphere for VMAX versions prior to 8.2.0, which can be exploited by a remote attacker to write...