EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system.Referenceshttp://www.securityfocus.com/bid/101626http://seclists.org/fulldisclosure/2017/Oct/68