Vulnerability in Emc Rsa Access Manager

CVE-2014-0646

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.003 (24.0th percentile) — read the EPSS interpretation.

Affected products

Emc Rsa_access_manager — versions 6.1, 6.2
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)