Vulnerability in Emc Geosynchrony
CVE-2013-3278
EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.
EPSS: 0.003 (26.3th percentile) — read the EPSS interpretation.
Affected products
- Emc Geosynchrony
- Emc Vplex_geo
- Emc Vplex_local
- Emc Vplex_metro
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)