Vulnerabilities > EMC > Vplex Geosynchrony > High

DATE CVE VULNERABILITY TITLE RISK
2015-12-28 CVE-2015-6850 Permissions, Privileges, and Access Controls vulnerability in EMC Vplex Geosynchrony 5.4/5.5
EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.
local
low complexity
emc CWE-264
7.2
2014-04-01 CVE-2014-0635 Improper Authentication vulnerability in EMC Vplex Geosynchrony
Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
network
emc CWE-287
7.5
2014-04-01 CVE-2014-0633 Improper Input Validation vulnerability in EMC Vplex Geosynchrony
The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.
low complexity
emc CWE-20
7.7