CVE-2015-6850
HighSummary
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, allowing local users to gain privileges by leveraging a login session.
Risk Assessment
The default password for the root account poses a serious security risk as local users can gain unauthorized access to the system.
Recommendation
It is recommended to immediately change the default password for the root account and implement a password management policy to enhance security.
Other vulnerabilities in EMC VPLEX GeoSynchrony
See all- CVE-2014-0633High
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
- CVE-2014-0632High
Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.