CVE-2015-6850

Mô tả

Tham khảo

• packetstormsecurity.com/files/135041/EMC-VPLEX-Undocumented-Account.html
• seclists.org/bugtraq/2015/Dec/129
• securityfocus.com/bid/79664
• securitytracker.com/id/1034526

Lỗ hổng khác của vplex geosynchrony

• CVE-2015-6847THẤP 2.1The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows …
• CVE-2014-0635CAO 7.5Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecifi…
• CVE-2014-0634TRUNG BÌNH 6.0EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which mak…
• CVE-2014-0633CAO 7.7The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for r…
• CVE-2014-0632NGHIÊM TRỌNG 9.0Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary co…