34 matches found
EUVD-2018-3122
Malware in sbrugna...
CVE-2018-11078
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic...
CVE-2018-11078
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic...
Design/Logic Flaw
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic...
CVE-2018-11078: Incorrect Permission Assignment for Critical Resource
Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic...
PT-2018-10289
Name of the Vulnerable Software and Affected Versions Dell EMC VPlex GeoSynchrony versions prior to 6.1 Description The issue allows a remote authenticated malicious user to read from VPN configuration files, potentially authoring a man-in-the-middle MITM attack on the VPN traffic. Recommendation...
CVE-2015-6850
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session...
CVE-2015-6850: Undefined Security Weakness
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session...
PT-2015-7390
Name of the Vulnerable Software and Affected Versions EMC VPLEX GeoSynchrony versions 5.4 SP1 before P3 EMC VPLEX GeoSynchrony versions 5.5 before Patch 1 Description The issue concerns a default password for the root account, allowing local users to gain privileges by leveraging a login session...
EMC VPLEX GeoSynchrony Local Information Disclosure Vulnerability
EMC VPLEX is a set of next-generation data storage platforms for moving and accessing information within, across and between data centers; GeoSynchrony is a VPLEX operating system. EMC VPLEX GeoSynchrony is configured by default to store plaintext NAVISPHERE GUI passwords in log files, which can ...
PT-2015-7387
Name of the Vulnerable Software and Affected Versions EMC VPLEX GeoSynchrony version 5.4 SP1 before P3 Description The default configuration of the software stores cleartext NAVISPHERE GUI passwords in a log file. This allows local users to obtain sensitive information by reading this file...
CVE-2015-6847: Exposure of Sensitive Information to an Unauthorized Actor
The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this file...
EMC VPLEX GeoSynchrony信息泄露漏洞
Bugtraq ID:666517 CVE ID:CVE-2014-0634 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony存在缺失HttpOnly属性漏洞，利用漏洞远程攻击者可获取敏感信息。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...
EMC VPLEX GeoSynchrony目录遍历漏洞
Bugtraq ID:66513 CVE ID:CVE-2014-0632 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony 4.0-5.2.1版本在实现上存在VPLEX GUI路径遍历漏洞，成功利用后可使远程攻击者获取敏感信息。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...
EMC VPLEX GeoSynchrony会话固定漏洞
Bugtraq ID:66514 CVE ID:CVE-2014-0635 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony存在会话固定漏洞，远程攻击者可以利用漏洞劫持任意会话，未授权访问受影响应用。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...
EMC VPLEX GeoSynchrony会话超时验证安全限制绕过漏洞
Bugtraq ID:66516 CVE ID:CVE-2014-0633 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony存在VPLEX GUI会话超时验证漏洞，远程攻击者可以利用漏洞绕过安全限制，获取敏感信息。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...
CVE-2014-0633
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation...
CVE-2014-0635
Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors...