CVEvulnerability
CVE-2014-0646
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-310
Description
The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.
Affected configurations
• emc rsa access manager 6.1
• emc rsa access manager 6.2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0191.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0191.html archives.neohapsis.com