Vulnerabilities > Dell > EMC Data Domain OS

DATE CVE VULNERABILITY TITLE RISK
2016-06-19 CVE-2016-0912 Permissions, Privileges, and Access Controls vulnerability in Dell EMC Data Domain OS
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account or (2) an account's session at an unattended workstation.
network
low complexity
dell CWE-264
critical
9.0
2016-06-19 CVE-2016-0911 Permissions, Privileges, and Access Controls vulnerability in Dell EMC Data Domain OS
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges.
local
low complexity
dell CWE-264
7.2