CVE-2017-14376: High severity dell emc appsync vulnerability
Published Nov 1, 2017
·Updated
EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.
Affected Software
1 affected component
EMC AppSync<3.5.0.1
Event History
Nov 1, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-14376?
CVE-2017-14376 is classified as a high severity vulnerability due to the presence of hardcoded passwords that can be exploited.
2
How do I fix CVE-2017-14376?
To mitigate CVE-2017-14376, upgrade EMC AppSync to version 3.5.0.1 or later to eliminate the hardcoded passwords.
3
What systems are affected by CVE-2017-14376?
CVE-2017-14376 affects all versions of EMC AppSync prior to 3.5.0.1.
4
What types of attacks can CVE-2017-14376 enable?
CVE-2017-14376 could enable unauthorized access and control over the EMC AppSync server due to compromised database accounts.
5
Who reported CVE-2017-14376?
CVE-2017-14376 was reported by security researchers who identified the hardcoded passwords in EMC AppSync.