Vulners
Lucene search
EMC AppSync Server Hardcoded Password Vulnerability
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | The vulnerability of EMC AppSync’s data storage and protection software, related to the use of pre-installed credentials, allows a perpetrator to gain access to the system. | 15 Feb 201800:00 | – | bdu_fstec |
 | EMC AppSync Server Hardcoded Password Vulnerability | 1 Nov 201700:00 | – | cnvd |
 | CVE-2017-14376 | 1 Nov 201701:00 | – | cve |
 | CVE-2017-14376 | 1 Nov 201701:00 | – | cvelist |
 | EUVD-2017-5879 | 7 Oct 202500:30 | – | euvd |
 | CVE-2017-14376 | 1 Nov 201701:29 | – | nvd |
 | Hardcoded credentials | 1 Nov 201701:29 | – | prion |
EMC AppSync Hardcoded Password Vulnerability
CVE Identifier: CVE-2017-14376
Severity Rating: CVSS v3 Base Score: 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected products:
EMC AppSync Server versions prior to 3.5.0.1
Summary:
EMC AppSync contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.
Details:
EMC AppSync contains hardcoded passwords for database accounts with administrative privileges. Affected accounts are "apollosuperuser" and "apollouser". An attacker with local access to the database and knowledge of the password may potentially gain unauthorized access to the database. Note: Remote access to AppSync PostgreSQL is disabled.
Resolution:
The following EMC AppSync release contains resolutions to this vulnerability:
* EMC AppSync Sever version 3.5.0.1
EMC recommends all customers upgrade at the earliest opportunity.
Link to remedies:
Customers can download software from https://download.emc.com/downloads/DL86785
# 0day.today [2018-01-09] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Nov 2017 00:00Current
7.5High risk
Vulners AI Score7.5
EPSS0.00319