CVE-2016-0890

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploited by malicious users to compromise the affected system.

Metrics

CVSS 3.0 6.4/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	EMC PowerPath Virtual (Management) Appliance EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1	EMC PowerPath Virtual (Management) Appliance EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1

References

http://www.securityfocus.com/archive/1/540065/30/0/threadedMitigation, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95832Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/540065/30/0/threadedMitigation, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95832Third Party Advisory, VDB Entry

Timeline

Published: Feb 3, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-08918.8Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hija CVE-2016-08926.1Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web s CVE-2016-08934.3EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages.CVE-2016-08946.3EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modifie CVE-2016-08954.3EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted tr CVE-2016-08967.3Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security CVE-2016-08979.8Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH a CVE-2016-089810.0MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service CVE-2016-08996.3EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential i CVE-2016-09006.1Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary we CVE-2016-09016.1Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary we CVE-2016-09025.3CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers a