CVE-2014-4624

Related Files

VMware Security Advisory 2014-0011

Posted Oct 25, 2014

Authored by VMware | Site vmware.com

VMware Security Advisory 2014-0011 - VMware vSphere Data Protection product updates address a vulnerability that could lead to sensitive information disclosure.

tags | advisory, info disclosure

advisories | CVE-2014-4624

SHA-256 | 215b15436296cd13af4a6c3a5c8a74092a6188a68cb68f18826067f34921f731

Download | Favorite | View

EMC Avamar Sensitive Information Disclosure

Posted Oct 24, 2014

Site emc.com

EMC Avamar server contains a vulnerability that may allow remote Avamar client user to retrieve sensitive account credentials from affected Avamar server using Java API calls. No authentication to Avamar server is required for this potential attack. Exposed information includes MCUser and GSAN account passwords of all grid systems that are being monitored in EMC Avamar Enterprise Manager. EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x up to and including 7.0.2-43 are affected.

tags | advisory, java, remote

advisories | CVE-2014-4624

SHA-256 | 24d8d814ea8b6331d98ee101748e0eb8f4305b743a3d2fab02a2af437b2537cb

Download | Favorite | View