PT-2013-4274 · Emc · Vplex

Publicado 2013-10-01 · Atualizado 2013-10-02 · CVE-2013-3278

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC VPLEX versions prior to VPLEX GeoSynchrony 5.2 SP1

Description The issue allows local users to obtain sensitive information by reading the management-server configuration file, as the LDAP/AD bind password is stored in cleartext.

Recommendations For versions prior to VPLEX GeoSynchrony 5.2 SP1, update to VPLEX GeoSynchrony 5.2 SP1 or later to resolve the issue. As a temporary workaround, consider restricting access to the management-server configuration file to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-3278

Produtos afetados

Vplex

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-3278 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-09/0135.html · Nota