TI-2018-07866 CVE-2018-11080 · GHSA-8gc3-f6rv-jq52
Incorrect permission assignment in Dell EMC ESRS Virtual Edition
Priority LOW 34
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities.
Vulnerabilities
8 records
TI-2018-07865 CVE-2018-11079 · GHSA-36hr-2pgw-4595
Insufficiently protected credentials in Dell EMC ESRS Virtual Edition
Priority LOW 34
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability.
TI-2017-03110 CVE-2017-4986 · GHSA-62qw-r234-68pp
Information disclosure in EMC ESRS Virtual Edition EMC ESRS VE 3.18 or earlier
Priority LOW 28
EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
TI-2015-05748 CVE-2015-6852 · GHSA-7p4m-jxwc-rxp7
Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual…
Priority LOW 24
Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.
TI-2015-00503 CVE-2015-0544 · GHSA-8g5w-5wrq-jqg3
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly…
Priority MEDIUM 45
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.
TI-2015-00502 CVE-2015-0543 · GHSA-w4wg-4jcp-7wx8
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly…
Priority LOW 27
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio…
TI-2015-00485 CVE-2015-0525 · GHSA-x46m-4cfq-6frf
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE)…
Priority LOW 39
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
TI-2015-00484 CVE-2015-0524 · GHSA-x2jp-jqfx-wrjx
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote…
Priority LOW 37
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.