Local User Vulnerability in EMC RSA Authentication Manager 8.0

CVE-2013-0947

What is CVE-2013-0947?

EMC RSA Authentication Manager version 8.0 prior to P1 contains a vulnerability that allows local users to gain unauthorized access to sensitive information. By reading specific log and configuration files, attackers can obtain cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP community strings. This vulnerability can lead to significant security breaches if exploited, as it compromises the confidentiality of critical authentication credentials.

References