CVEvulnerability
CVE-2014-4620
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.
Affected configurations
• meditech meditech 3.0
• emc networker
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html archives.neohapsis.com
- http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html packetstormsecurity.com
- http://secunia.com/advisories/61952 secunia.com
- http://www.securityfocus.com/bid/70726 www.securityfocus.com
- http://www.securitytracker.com/id/1031116 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97756 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html archives.neohapsis.com
- http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html packetstormsecurity.com
- http://secunia.com/advisories/61952 secunia.com
- http://www.securityfocus.com/bid/70726 www.securityfocus.com
- http://www.securitytracker.com/id/1031116 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97756 exchange.xforce.ibmcloud.com