medium5.0
CVE-2015-0529
EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote at…
Impact
EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Powerpath Virtual Appliance | through 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html
- http://seclists.org/bugtraq/2015/Apr/1
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html
- http://seclists.org/bugtraq/2015/Apr/1