PT-2015-4693 · Emc · Emc Powerpath Virtual Appliance

Published 2015-04-05 · Updated 2016-08-23 · CVE-2015-0529

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC PowerPath Virtual Appliance versions prior to 2.0

Description The issue allows remote attackers to obtain potentially sensitive information via a login session due to default passwords for the emcupdate and svcuser accounts.

Recommendations For versions prior to 2.0, change the default passwords for the emcupdate and svcuser accounts to secure ones.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-0529

Affected Products

Emc Powerpath Virtual Appliance

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0529 · Security Note
• http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html · Note
• http://seclists.org/bugtraq/2015/Apr/1 · Note