ESA-2013-091: EMC Watch4net Information Disclosure Vulnerability

ESA-2013-091.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-091: EMC Watch4net Information Disclosure Vulnerability EMC Identifier: ESA-2013-091 CVE Identifier: CVE-2013-6181 Severity Rating: CVSS v2 Base Score: CVSS 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: • EMC Watch4Net...

CVE-2013-6181

EMC Watch4Net is affected by CVE-2013-6181 in versions prior to 6.3. The vulnerability stems from storing device passwords in cleartext within the installation repository, allowing a local attacker with repository access to view sensitive credentials. The EMC security advisory confirms the remedi...

CVE-2013-6181: Undefined Security Weakness

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges...