CVE-2015-0516

EMC M&R (Watch4Net) path traversal vulnerability CVE-2015-0516 affects EMC M&R/Watch4Net prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1. An authenticated user can manipulate URLs to read arbitrary files on the system via the MIB Browser/Device Discovery interfaces. Root cause is a directory trave...

CVE-2015-0514

EMC M&R (Watch4net) before 6.5u1 and ViPR SRM before 3.6.1 store remote-server credentials in Watch4net encrypted with a fixed hardcoded password, which makes the credentials decryptible if an attacker obtains the encrypted copy. Affected products include EMC M&R (Watch4Net) < 6.5u1 and EMC Vi...

CVE-2015-0513

CVE-2015-0513 describes Cross-Site Scripting in EMC M&R (Watch4Net) Centralized Management Console and related UI components. Affected products are EMC M&R (Watch4Net) up to version 6.5u1 and EMC ViPR SRM up to version 3.6.1. The root cause is reflected/stored XSS in administrative UI elements (C...

CVE-2013-6181

EMC Watch4Net is affected by CVE-2013-6181 in versions prior to 6.3. The vulnerability stems from storing device passwords in cleartext within the installation repository, allowing a local attacker with repository access to view sensitive credentials. The EMC security advisory confirms the remedi...

CVE-2015-0515

CVE-2015-0515 affects EMC M&R (Watch4Net) before 6.5u1 and EMC ViPR SRM before 3.6.1. An unauthenticated? No: authenticated, privileged user can upload an arbitrary file via the web interface and access that file to execute code on the affected system. The issue is part of a set of Watch4Net/ViPR...