CVE-2012-2284

The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html
http://osvdb.org/86157
http://secunia.com/advisories/50957
http://www.securityfocus.com/bid/55883
http://www.securitytracker.com/id?1027647
http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html
http://osvdb.org/86157
http://secunia.com/advisories/50957
http://www.securityfocus.com/bid/55883
http://www.securitytracker.com/id?1027647

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.2.1:::::::*
	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.3:::::::*
	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.4:::::::*

cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:38

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html -~~	() http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html -
References	~~() http://osvdb.org/86157 -~~	() http://osvdb.org/86157 -
References	~~() http://secunia.com/advisories/50957 -~~	() http://secunia.com/advisories/50957 -
References	~~() http://www.securityfocus.com/bid/55883 -~~	() http://www.securityfocus.com/bid/55883 -
References	~~() http://www.securitytracker.com/id?1027647 -~~	() http://www.securitytracker.com/id?1027647 -

Information

Published : 2012-10-18 17:55

Updated : 2024-11-21 01:38

NVD link : CVE-2012-2284

Mitre link : CVE-2012-2284

CVE.ORG link : CVE-2012-2284

JSON object : View

Products Affected

microsoft

exchange_server

emc

networker_module_for_microsoft_applications

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2012-2284", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-10-18T17:55:01.613", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html", "source": "security_alert@emc.com"}, {"url": "http://osvdb.org/86157", "source": "security_alert@emc.com"}, {"url": "http://secunia.com/advisories/50957", "source": "security_alert@emc.com"}, {"url": "http://www.securityfocus.com/bid/55883", "source": "security_alert@emc.com"}, {"url": "http://www.securitytracker.com/id?1027647", "source": "security_alert@emc.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/86157", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/50957", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/55883", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1027647", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors."}, {"lang": "es", "value": "El proceso del (1) instalaci\u00f3n and (2) actualizaci\u00f3n en EMC NetWorker Module para Microsoft Applications (NMM) v2.2.1, v2.3 anterior al build v122, y v2.4 anterior al build v375, cuando el Exchange Server es usado, permite a usuarios locales leer las credenciales del administrador en texto plano mediante vectores desconocidos vectors."}], "lastModified": "2024-11-21T01:38:48.903", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D3D6453-4971-4802-B9AA-C30E682A6B4E"}, {"criteria": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B946CBA-1DBF-4A95-AE52-8A8D7A595F05"}, {"criteria": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB5A268E-D2C6-4D64-B60C-A95C1ECDFD80"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "261FB692-DD0F-494F-A25A-AFCC00BE4585"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security_alert@emc.com"}