EMC Unisphere for VMAX information leakage

Under some conditions cleartext password is logged...

ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability

ESA-2013-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability EMC Identifier: ESA-2013-074 CVE Identifier: CVE-2013-3287 Severity Rating: CVSS v2 Base Score: 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C Affected products • EMC Unisphere...

CVE-2013-3287

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

Default credentials

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2013-3287

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...

CVE-2013-3287

EMC Unisphere for VMAX prior to version 1.6.1.6 is affected. If an unspecified level of LDAP debug logging is enabled, local users can read the LDAP bind password in cleartext from the console output. Remediation shown across sources: upgrade to Unisphere for VMAX 1.6.1.6 and/or change the LDAP b...

PT-2013-4280

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions prior to 1.6.1.6 Description The issue allows local users to discover the cleartext LDAP bind password by reading the console when an unspecified level of debug logging is used in LDAP configurations...

CVE-2013-3287: Undefined Security Weakness

EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console...