CVEvulnerability
CVE-2015-0529
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.
Affected configurations
• emc powerpath virtual appliance (<= 1.2)
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Apr/1 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Apr/1 Third Party Advisory, VDB Entry