CVE-2011-1742

EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://securityreason.com/securityalert/8318	Third Party Advisory
http://www.securityfocus.com/archive/1/519012/100/0/threaded	Third Party Advisory VDB Entry
http://securityreason.com/securityalert/8318	Third Party Advisory
http://www.securityfocus.com/archive/1/519012/100/0/threaded	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:data_protection_advisor::::::::
	cpe:2.3:a:emc:data_protection_advisor:5.0:sp1::::::
	cpe:2.3:a:emc:data_protection_advisor:5.6:::::::*
	cpe:2.3:a:emc:data_protection_advisor:5.6.1:::::::*
	cpe:2.3:a:emc:data_protection_advisor:5.7:::::::*
	cpe:2.3:a:emc:data_protection_advisor:5.7:sp1::::::
	cpe:2.3:a:emc:data_protection_advisor:5.7.1:::::::*
	cpe:2.3:a:emc:data_protection_advisor:5.8:sp1::::::

History

21 Nov 2024, 01:26

Type	Values Removed	Values Added
References	~~() http://securityreason.com/securityalert/8318 - Third Party Advisory~~	() http://securityreason.com/securityalert/8318 - Third Party Advisory
References	~~() http://www.securityfocus.com/archive/1/519012/100/0/threaded - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/archive/1/519012/100/0/threaded - Third Party Advisory, VDB Entry

Information

Published : 2011-08-01 19:55

Updated : 2024-11-21 01:26

NVD link : CVE-2011-1742

Mitre link : CVE-2011-1742

CVE.ORG link : CVE-2011-1742

JSON object : View

Products Affected

emc

data_protection_advisor

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2011-1742", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-08-01T19:55:00.927", "references": [{"url": "http://securityreason.com/securityalert/8318", "tags": ["Third Party Advisory"], "source": "security_alert@emc.com"}, {"url": "http://www.securityfocus.com/archive/1/519012/100/0/threaded", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security_alert@emc.com"}, {"url": "http://securityreason.com/securityalert/8318", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/519012/100/0/threaded", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file."}, {"lang": "es", "value": "EMC Data Protection Advisor anterior a v5.8.1 coloca credenciales de cuentas en texto claro en el fichero de configuraci\u00f3n DPA en circunstancias no especificadas, lo que permite a usuarios locales obtener informaci\u00f3n sensible leyendo este fichero."}], "lastModified": "2024-11-21T01:26:55.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:data_protection_advisor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB18B02E-2CA7-4307-AB85-16F2D8B06C4E", "versionEndIncluding": "5.8"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D7A6CF8-EFAC-4BB4-8F21-2CE94BAF354E"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E71E518A-F416-4850-9F2B-7E93CD975381"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7560AEA2-9334-4E88-BB38-2FBE62633FF7"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30116207-86BD-4384-87C3-7919340DB5D3"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.7:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28572343-8AAB-4249-9FA6-001757B83061"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A53E842-8C42-4B93-836D-9DC2413DCB71"}, {"criteria": "cpe:2.3:a:emc:data_protection_advisor:5.8:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D72AB885-317E-4DF4-8FEF-689DCE3BCA92"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}