Approved changes feed: RSS · Atom

cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1:*:*:*:*:*:*

part: a version: 10.0 update: sp1

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductCloud Tiering Appliance Software (3b5e2854-c449-51b1-b16b-0a660c29cd2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0645 vulnerable 2026-06-08 05:05:13.869290 Details available
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Published: 2014-04-17T01:00:00.000Z
Updated: 2024-08-06T09:20:19.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0644 vulnerable 2026-06-08 05:05:13.867351 Details available
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.
Published: 2014-04-17T01:00:00.000Z
Updated: 2024-08-06T09:20:19.877Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.