SQL Injection in EMC Secure Remote Services

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.

Affected products

Emc Secure_remote_services — versions 3.02, 3.03
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (Exploit, x_refsource_MISC)
security_alert@emc.com (mailing-list, x_refsource_FULLDISC)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (x_refsource_MISC)