CVE

Id
71921  
CVE No.
CVE-2014-4624  
Status
Candidate  
Description
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call.  
Phase
Assigned (20140624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682466 71921 CVE-2014-4624 BUGTRAQ:20141022 ESA-2014-096: EMC Avamar Sensitive Information Disclosure Vulnerability  View
682467 71921 CVE-2014-4624 URL:http://archives.neohapsis.com/archives/bugtraq/2014-10/0147.html  View
682468 71921 CVE-2014-4624 BUGTRAQ:20141024 NEW VMSA-2014-0011 VMware vSphere Data Protection product update addresses a critical information disclosure vulnerability  View
682469 71921 CVE-2014-4624 URL:http://www.securityfocus.com/archive/1/archive/1/533813/100/0/threaded  View
682470 71921 CVE-2014-4624 MISC:http://packetstormsecurity.com/files/128843/EMC-Avamar-Sensitive-Information-Disclosure.html  View
682471 71921 CVE-2014-4624 MISC:http://packetstormsecurity.com/files/128850/VMware-Security-Advisory-2014-0011.html  View
682472 71921 CVE-2014-4624 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2014-0011.html  View
682473 71921 CVE-2014-4624 BID:70709  View
682474 71921 CVE-2014-4624 URL:http://www.securityfocus.com/bid/70709  View
682475 71921 CVE-2014-4624 SECTRACK:1031114  View
682476 71921 CVE-2014-4624 URL:http://www.securitytracker.com/id/1031114  View
682477 71921 CVE-2014-4624 SECTRACK:1031118  View
682478 71921 CVE-2014-4624 URL:http://www.securitytracker.com/id/1031118  View
682479 71921 CVE-2014-4624 SECUNIA:61663  View
682480 71921 CVE-2014-4624 URL:http://secunia.com/advisories/61663  View
682481 71921 CVE-2014-4624 SECUNIA:61950  View
682482 71921 CVE-2014-4624 URL:http://secunia.com/advisories/61950  View
682483 71921 CVE-2014-4624 XF:vsphere-data-cve20144624-info-disc(97729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18937 JVNDB-2014-007812 VMware vSphere Data Protection におけるサーバになりすまされる脆弱性 VMware vSphere Data Protection (VDP) は、vCenter Server SSL サーバからの X.509 証明書を適切に検証しないため、サーバになりすまされ、バックアップおよびリストアのアクセス制限を回避される脆弱性が存在します。 CVE-2014-4632 71921 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007812.html  View