CVE-2013-3278
Published Oct 1, 2013
Last updated 11 years ago
Overview
- Description
- EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.
- Source
- security_alert@emc.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.9
- Impact score
- 6.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-255
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emc:geosynchrony:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6C24A0F-609D-4094-B836-55564B6351A0",
"versionEndIncluding": "5.2"
},
{
"criteria": "cpe:2.3:h:emc:vplex_geo:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86BB9E0B-9F56-420E-8E0C-D1A843E18CE0"
},
{
"criteria": "cpe:2.3:h:emc:vplex_local:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82F38131-D4D3-46FE-BEF5-54AF156B18A7"
},
{
"criteria": "cpe:2.3:h:emc:vplex_metro:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00DB012E-E60B-4228-8C60-7F303F160094"
}
],
"operator": "OR"
}
]
}
]