CVE-2013-6181

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges.

Score

CVSS 2.0 2.1 Low

Status

Modified - security_alert@emc.com

Published

2013-12-28

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Watch4net (Emc)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-12/0140.html
• http://packetstormsecurity.com/files/124585/EMC-Watch4net-Information-Disclosure.html
• http://www.securityfocus.com/bid/64517
• http://www.securitytracker.com/id/1029535