CVE-2017-14376 EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.
HighCVSS 7.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc appsync | < 3.5.0.1 | 3.5.0.1 |
References
- seclists.org mailing-list third-party-advisory
- 101626 third-party-advisory vdb-entry