EMC Atmos default account Authentication Bypass Vulnerability

Release date: 2013-10-03
Updated on:

Affected Systems:
EMC Atmos 2.1.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 62816
CVE (CAN) ID: CVE-2013-3279

EMC Atmos is a platform for storing, archiving, and accessing large-scale unstructured data.

Versions earlier than EMC Atmos 2.1.4 allow you to use a default user account to connect to a remote PostgreSQL database server without providing a password to access the system information used to manage the Atmos node.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://china.emc.com/storage/atmos/atmos.htm