CVE-2014-4624 in vSphere Data Protection
Summary
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/24/2014
Disclosure
10/25/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68049 | VMware vSphere Data Protection Java API Password access control | 264 | Unproven | Official fix | CVE-2014-4624 |