CVE-2015-0529 - EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session

Back Back to CVE browser

MEDIUM

EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session

Published Apr 5, 2015

5.0

MEDIUM

CVSS 2.0

EPSS 2.85%

Description

EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-255

References (3)

http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html
x_refsource_MISCThird Party AdvisoryVDB Entry
http://seclists.org/bugtraq/2015/Apr/1
mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0542
Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html		x_refsource_MISCThird Party AdvisoryVDB Entry
http://seclists.org/bugtraq/2015/Apr/1		mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0542		Advisory