CVE-2015-0529

EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.

Score

CVSS 2.0 5.0 Medium

Status

Modified - security_alert@emc.com

Published

2015-04-05

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Powerpath Virtual Appliance (Emc)

References

• http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html
• http://seclists.org/bugtraq/2015/Apr/1