Dell EMC patches critical flaws in VMAX enterprise storage systems

The Dell EMC VMAX storage platform. Credit: Dell EMC

Lucian Constantin
IDG News Service
Oct 3, 2016 12:05 PM
Remote, unauthenticated attackers could exploit the vulnerabilities to fully compromise the systems

Dell EMC has fixed six flaws in its management interfaces for VMAX enterprise storage systems, including three vulnerabilities that are rated critical and could lead to the exposure of sensitive files or a complete system compromise.

One of the critical flaws is located in the Unisphere for VMAX enterprise storage arrays, an appliance that provides a web-based management interface to provision, manage, and monitor such systems.

More specifically, the flaw is in the GraniteDS library that provides server-side support for the Flash-based portion of the Unisphere web application. According to researchers from vulnerability management firm Digital Defense, the issue allows unauthenticated attackers to retrieve arbitrary text files from the virtual appliance with root privileges.

Another critical vulnerability was fixed in the vApp Manager application for

Storage management software: The smart person's guide

By Evan Koblentz | October 3, 2016, 1:43 PM PST

Storage management software is complicated. Read this guide in which we attempt to explain it simply.

Storage management software is more important than ever, thanks to the increasing big-ness of big data, the rise of cloud computing, and the coming wave of Internet of Things information. This guide is an entry-level summary of software management software.

SEE: Check out all of TechRepublic's smart person's guides

To help explain which way is up, we sought advice from Evaluator Group analyst Randy Kerns, who's been in the storage field since its days of punched cards and data hieroglyphics. We also received input from Mark Peters of Enterprise Strategy Group.

Executive summary

What is it? The more data you have, the more tender loving care it requires—that comes in the form of storage management software. The software keeps your data safe, ensures the right bits are stored in the right place, coordinates with your applications, and continuously reports on the data's health.

Why does it matter? Other than people, your company's data is its most valuable asset.

Who does this affect? Traditionally, the answer is just storage management professionals; Kerns explained how that is changing. Cloud-centric businesses may have