PT-2015-7387 · Emc · Navisphere Gui+1

Published 2015-11-18 · Updated 2016-12-07 · CVE-2015-6847

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC VPLEX GeoSynchrony version 5.4 SP1 before P3

Description The default configuration of the software stores cleartext NAVISPHERE GUI passwords in a log file. This allows local users to obtain sensitive information by reading this file.

Recommendations For EMC VPLEX GeoSynchrony version 5.4 SP1 before P3, update to a version that includes the P3 patch to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-6847

Affected Products

Emc Vplex Geosynchrony

Navisphere Gui

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-6847 · Security Note
• http://securitytracker.com/id/1034169 · Note
• http://packetstormsecurity.com/files/134420/EMC-VPLEX-Sensitive-Information-Exposure.html · Note
• http://seclists.org/bugtraq/2015/Nov/92 · Note