CVE-2015-6852

Description

References

• packetstormsecurity.com/files/135044/EMC-Secure-Remote-Services-Virtual-Edition-Path-Traversal.html
• seclists.org/bugtraq/2015/Dec/130
• securityfocus.com/bid/79661
• securitytracker.com/id/1034530

More vulnerabilities in secure remote services

• CVE-2018-11080HIGH 7.8Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains m…
• CVE-2018-11079HIGH 7.8Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are…
• CVE-2017-4986MEDIUM 5.3EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected…
• CVE-2015-0544CRITICAL 9.3EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which mak…
• CVE-2015-0543MEDIUM 5.8EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which all…