Information Disclosure in EMC Unisphere for VMAX Affects Local Users
CVE-2013-3287

Currently unrated

Key Information:

Vendor

Dell
Status
Emc Unisphere
Vendor
CVE Published:
2 November 2013

What is CVE-2013-3287?

The EMC Unisphere for VMAX application prior to version 1.6.1.6 contains a vulnerability that allows local users with access to the console to disclose the cleartext LDAP bind password. This occurs when the software is configured to employ an unspecified level of debug logging in LDAP settings, potentially exposing sensitive authentication information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/01...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/63425
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.