CVE-2014-4620

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

Score

CVSS 2.0 2.1 Low

Status

Modified - security_alert@emc.com

Published

2014-10-25

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Networker (Emc)
• Meditech (Meditech)

References

• http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
• http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
• http://secunia.com/advisories/61952
• http://www.securityfocus.com/bid/70726
• http://www.securitytracker.com/id/1031116
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97756