CVE-2013-3278

CVE-2013-3278 affects EMC VPLEX/NV GeoSynchrony (5.2 SP1 and earlier). The vulnerability stores LDAP/AD bind passwords in cleartext inside the VPLEX management server configuration file, enabling local users with file access to obtain sensitive credentials. Supported impacted versions include Geo...

CVE-2013-3278

EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file...

ESA-2013-060: EMC VPLEX Information Disclosure Vulnerability

ESA-2013-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-060: EMC VPLEX Information Disclosure Vulnerability EMC Identifier: ESA-2013-060 CVE Identifier: CVE-2013-3278 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products: • EMC VPLEX Local/Metro/Geo...

EMC VPLEX Information leakage

Cleartetext passwords in configuration files...

CVE-2013-3278: Undefined Security Weakness

EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file...