Sensitive Information Disclosure in EMC RSA Authentication Manager by RSA Security

CVE-2013-3273

What is CVE-2013-3273?

A sensitive information disclosure vulnerability exists in RSA Authentication Manager versions prior to P2 for 8.0 and SP4 P26 for 7.1. This issue arises due to the inappropriate handling of administrative passwords in custom SDK applications, where these passwords are logged in cleartext within trace log files. Local users with access to these log files could exploit this flaw to retrieve sensitive information, potentially compromising system security and integrity.

References