CVE-2013-3285 The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator...
LowCVSS 3.5
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 8.0 | No fix listed |
| emc networker | = 8.0.0.1 | No fix listed |
| emc networker | = 8.0.0.2 | No fix listed |
| emc networker | = 8.0.0.3 | No fix listed |
| emc networker | = 8.0.0.4 | No fix listed |
| emc networker | = 8.0.0.5 | No fix listed |
| emc networker | = 8.0.0.6 | No fix listed |
| emc networker | = 8.0.1.3 | No fix listed |
| emc networker | = 8.0.1.4 | No fix listed |
| emc networker | = 8.0.1.5 | No fix listed |
| emc networker | = 8.0.1.6 | No fix listed |
| emc networker | = 8.0.2.0 | No fix listed |
| emc networker | = 8.0.2.1 | No fix listed |
| emc networker | = 8.0.2.2 | No fix listed |
References
- 20131029 ESA-2013-072: EMC NetWorker Information Disclosure Vulnerability mailing-list
- 99067 vdb-entry
- 63402 vdb-entry
- 1029265 vdb-entry