CVEvulnerability
CVE-2013-3278
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-255
Description
EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.
Affected configurations
• emc geosynchrony (<= 5.2)
• emc vplex geo
• emc vplex local
• emc vplex metro
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-09/0135.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2013-09/0135.html archives.neohapsis.com