CVE-2017-14375

EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system.

• CWE-290

• http://seclists.org/fulldisclosure/2017/Oct/70Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101673Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039704Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/70Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101673Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039704Third Party Advisory, VDB Entry

Published

Nov 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14369RSA Archer GRC Platform prior to 6.2.0.5 is affected by a pr…
• CVE-2017-14370RSA Archer GRC Platform prior to 6.2.0.5 is affected by stor…
• CVE-2017-14371RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14372RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14373EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contai…
• CVE-2017-14374The SMI-S service in Dell Storage Manager versions earlier t…
• CVE-2017-14376EMC AppSync Server prior to 3.5.0.1 contains database accoun…
• CVE-2017-14377EMC RSA Authentication Agent for Web: Apache Web Server vers…
• CVE-2017-14378EMC RSA Authentication Agent API 8.5 for C and RSA Authentic…
• CVE-2017-14379EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross…
• CVE-2017-1438IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.…
• CVE-2017-14380In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.…