PT-2013-4280 · Emc · Emc Unisphere For Vmax

Publicado 2013-11-02 · Atualizado 2021-08-05 · CVE-2013-3287

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions prior to 1.6.1.6

Description The issue allows local users to discover the cleartext LDAP bind password by reading the console when an unspecified level of debug logging is used in LDAP configurations.

Recommendations For versions prior to 1.6.1.6, update to version 1.6.1.6 or later to resolve the issue. As a temporary workaround, consider disabling debug logging in LDAP configurations to minimize the risk of exploitation. Restrict access to the console to prevent unauthorized users from reading the cleartext LDAP bind password.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-3287

Produtos afetados

Emc Unisphere For Vmax

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2013-10/0155.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3287 · Nota de Segurança
• https://t.me/cvenotify/18691 · Publicação no Telegram
• http://securityfocus.com/bid/63425 · Nota