Vulnerability in Emc Powerpath Virtual Appliance

CVE-2015-0529

EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.

EPSS: 0.028 (85.2th percentile) — read the EPSS interpretation.

Affected products

Emc Powerpath_virtual_appliance
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

security_alert@emc.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)