PT-2012-1811 · Emc · Emc Sourceone Email Management

Publicado 2012-01-19 · Atualizado 2012-01-19 · CVE-2011-4142

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC SourceOne Email Management versions 6.5 through 6.5.2.4033 EMC SourceOne Email Management versions 6.6 through 6.6.1.2194 EMC SourceOne Email Management versions 6.7 through 6.7.2.2033

Description The issue concerns the Web Search feature, which stores cleartext credentials in log files. This allows local users to access sensitive information by reading these files.

Recommendations For versions 6.5 through 6.5.2.4033, update to version 6.5.2.4033 or later. For versions 6.6 through 6.6.1.2194, update to version 6.6.1.2194 or later. For versions 6.7 through 6.7.2.2033, update to version 6.7.2.2033 or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2011-4142

Produtos afetados

Emc Sourceone Email Management

Referências · 2

• http://securityfocus.com/archive/1/521290 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4142 · Nota de Segurança