CVE-2014-0644

The CVE-2014-0644 flaw affects EMC Cloud Tiering Appliance (CTA) 10 through SP1, with an unauthenticated XXE in the/ api/login flow that permits reading arbitrary files (e.g., /etc/shadow) with root privileges. Public references describe an unauthenticated XXE arbitrary file read, and multiple ad...

CVE-2014-0645

EMC Cloud Tiering Appliance (CTA) versions 9.x–10 SP1 and Cloud Tiering Appliance (CTA) 10.x/10 SP1 Vulnerabilities: two issues are described. First, CVE-2014-0645: default root/super/admin passwords are DES-encrypted and stored, enabling context-dependent attackers to brute-force sensitive data ...