CVE-2015-0514

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
• packetstormsecurity.com/files/130910/EMC-M-R-Watch4net-Insecure-Credential-Storage.html
• seclists.org/fulldisclosure/2015/Mar/112 · Exploit
• securityfocus.com/archive/1/534923/100/0/threaded
• securityfocus.com/bid/72257
• securitytracker.com/id/1031567
• securify.nl/advisory/SFY20141101/emc_m_r__watch4net__data_storage_collector_credentials_are_not_properly_protected.html · Exploit

vipr srm のその他の脆弱性

• CVE-2016-6647中 5.4Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-6643中 6.1Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via uns…
• CVE-2016-6642中 6.1Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of adminis…
• CVE-2016-6641高 7.6Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-0922緊急 9.8EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to ob…