Information Disclosure Vulnerability in EMC RSA Web Threat Detection

CVE-2015-4547

What is CVE-2015-4547?

EMC RSA Web Threat Detection prior to version 5.1 SP1 is susceptible to an information disclosure vulnerability due to the insecure storage of the AnnoDB password within a configuration file. This flaw allows remote authenticated users to read the file and acquire sensitive credentials, potentially leading to unauthorized access to critical system components. Organizations using this version must take immediate action to safeguard sensitive information and mitigate exploitation risks.

References