PT-2015-7387 · Emc · Navisphere Gui+1

Publicado 2015-11-18 · Atualizado 2016-12-07 · CVE-2015-6847

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC VPLEX GeoSynchrony version 5.4 SP1 before P3

Description The default configuration of the software stores cleartext NAVISPHERE GUI passwords in a log file. This allows local users to obtain sensitive information by reading this file.

Recommendations For EMC VPLEX GeoSynchrony version 5.4 SP1 before P3, update to a version that includes the P3 patch to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-6847

Produtos afetados

Emc Vplex Geosynchrony

Navisphere Gui

Referências · 4

• http://securitytracker.com/id/1034169 · Nota
• http://packetstormsecurity.com/files/134420/EMC-VPLEX-Sensitive-Information-Exposure.html · Nota
• http://seclists.org/bugtraq/2015/Nov/92 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6847 · Nota de Segurança