Vulnerability Description
EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Powerpath Virtual Appliance | <= 1.2 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-UndoThird Party AdvisoryVDB Entry
- http://seclists.org/bugtraq/2015/Apr/1Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-UndoThird Party AdvisoryVDB Entry
- http://seclists.org/bugtraq/2015/Apr/1Third Party AdvisoryVDB Entry
FAQ
What is CVE-2015-0529?
CVE-2015-0529 is a vulnerability with a CVSS score of 5.0 (MEDIUM). EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive i...
How severe is CVE-2015-0529?
CVE-2015-0529 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0529?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Powerpath Virtual Appliance.