Unscored CVE-2016-0910 EUVD-2016-0921GHSA-h8m5-xx2h-c8jm

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-read…

Published Jun 10, 2016 · Updated Aug 5, 2024 · Assigned by dell

Description

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors.

References

20160608 ESA-2016-064: EMC Data Domain Information Disclosure Vulnerability mailing-list
1036074 vdb-entry