45 matches found
EMC M&R (Watch4net) Web Portal Report Favorites XSS
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Web Portal Report Favorites ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC M&R (Watch4net) Centralized Management Console XSS
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Centralized Management Console ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC M&R (Watch4net) MIB Browser Path Traversal
------------------------------------------------------------------------ Path traversal vulnerability in EMC M&R Watch4net MIB Browser ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC M&R (Watch4net) MIB Browser Path Traversal Vulnerability
A path traversal vulnerability was found in EMC M&R Watch4net MIB Browser. This vulnerability allows an attacker to access sensitive files containing configuration data, passwords, database records, log data, source code, and program scripts and binaries...
EMC M&R (Watch4net) Alerting Frontend XSS
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Alerting Frontend ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC M&R (Watch4net) Insecure Credential Storage
------------------------------------------------------------------------ EMC M&R Watch4net data storage collector credentials are not properly protected ------------------------------------------------------------------------ Han Sahin, November 2014...
EMC MR (Watch4net) - Credential Disclosure
EMC MR Watch4net - Credential Disclosure Abstract It was discovered that EMC M&R Watch4net credentials of remote servers stored in Watch4net are encrypted using a fixed hardcoded password. If an attacker manages to obtain a copy of the encrypted credentials, it is trivial to decrypt them. Affecte...
EMC M&R (Watch4net) - Credential Disclosure
Abstract It was discovered that EMC M&R Watch4net credentials of remote servers stored in Watch4net are encrypted using a fixed hardcoded password. If an attacker manages to obtain a copy of the encrypted credentials, it is trivial to decrypt them. Affected products EMC reports that the following...
EMC MR (Watch4net) - Directory Traversal
EMC MR Watch4net - Directory Traversal Abstract A path traversal vulnerability was found in EMC M&R Watch4net Device Discovery. This vulnerability allows an attacker to access sensitive files containing configuration data, passwords, database records, log data, source code, and program scripts an...
ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-004: EMC M&R Watch4Net Multiple Vulnerabilities EMC Identifier: ESA-2015-004 CVE Identifier: CVE-2015-0513, CVE-2015-0514, CVE-2015-0515, CVE-2015-0516, CVE-2014-4288, CVE-2014-6456, CVE-2014-6457, CVE-2014-6458, CVE-2014-6466, CVE-2014-6468,...
EMC M&R/ViPR SRM File Upload Vulnerability
EMC M&R Watch4Net is an IT performance management application.EMC ViPR SRM is a storage resource management application. A file upload vulnerability exists in EMC M&R versions prior to 6.5u1 and ViPR SRM versions prior to 3.6.1, which could allow a remote authenticated user to upload a file and...
EMC M&R/ViPR SRM Information Disclosure Vulnerability
EMC M&R Watch4Net is an IT performance management application.EMC ViPR SRM is a storage resource management application. An information disclosure vulnerability exists in EMC M&R versions prior to 6.5u1 and ViPR SRM versions prior to 3.6.1, which could allow a remote attacker to gain access to a...
Multiple Cross-Site Scripting Vulnerabilities in EMC M&R/ViPR SRM
EMC M&R Watch4Net is an IT performance management application.EMC ViPR SRM is a storage resource management application. Multiple cross-site scripting vulnerabilities exist in EMC M&R versions prior to 6.5u1 and ViPR SRM versions prior to 3.6.1, which could allow remote authenticated users to...
EMC M&R/ViPR SRM Directory Traversal Vulnerability
EMC M&R Watch4Net is an IT performance management application.EMC ViPR SRM is a storage resource management application. A directory traversal vulnerability exists in EMC M&R versions prior to 6.5u1 and ViPR SRM versions prior to 3.6.1, which allows remote authenticated users to read arbitrary...
CVE-2015-0516
Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...
Unrestricted file upload
Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...
CVE-2015-0516
EMC M&R (Watch4Net) path traversal vulnerability CVE-2015-0516 affects EMC M&R/Watch4Net prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1. An authenticated user can manipulate URLs to read arbitrary files on the system via the MIB Browser/Device Discovery interfaces. Root cause is a directory trave...
CVE-2015-0515
CVE-2015-0515 affects EMC M&R (Watch4Net) before 6.5u1 and EMC ViPR SRM before 3.6.1. An unauthenticated? No: authenticated, privileged user can upload an arbitrary file via the web interface and access that file to execute code on the affected system. The issue is part of a set of Watch4Net/ViPR...
CVE-2015-0514
EMC M&R (Watch4net) before 6.5u1 and ViPR SRM before 3.6.1 store remote-server credentials in Watch4net encrypted with a fixed hardcoded password, which makes the credentials decryptible if an attacker obtains the encrypted copy. Affected products include EMC M&R (Watch4Net) < 6.5u1 and EMC Vi...