PT-2014-3741 · Emc · Emc Rsa Access Manager

Publicado

2014-05-01

·

Atualizado

2014-05-02

·

CVE-2014-0646

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions EMC RSA Access Manager versions 6.1.3 through 6.1.3.38 EMC RSA Access Manager versions 6.1.4 through 6.1.4.21 EMC RSA Access Manager versions 6.2.0 through 6.2.0.10 EMC RSA Access Manager versions 6.2.1 through 6.2.1.02
Description The issue allows local users to discover cleartext passwords by reading log files when INFO logging is enabled in the runtime WS component of the server.
Recommendations For EMC RSA Access Manager version 6.1.3, update to version 6.1.3.39 or later. For EMC RSA Access Manager version 6.1.4, update to version 6.1.4.22 or later. For EMC RSA Access Manager version 6.2.0, update to version 6.2.0.11 or later. For EMC RSA Access Manager version 6.2.1, update to version 6.2.1.03 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-0646

Produtos afetados

Emc Rsa Access Manager