Vulnerability in Emc Cloud_tiering_appliance
CVE-2014-0645
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive infor…
EPSS: 0.001 (21.5th percentile) — read the EPSS interpretation.
Affected products
- Emc Cloud_tiering_appliance
- Emc Cloud_tiering_appliance_software — versions 9.0, 10.0
- Emc File_management_appliance
- Emc File_management_appliance_software — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- 20140416 ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity (XXE) and Information Disclosure Vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_MISC)
- 20140331 EMC CTA v10.0 unauthenticated XXE with root perms (mailing-list, x_refsource_FULLDISC)