CVE-2014-4620 | BDVDB-2026-65833 Detail
Description#
The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
- http://www.securitytracker.com/id/1031116
- http://www.securityfocus.com/bid/70726
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97756
- http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
- http://secunia.com/advisories/61952
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.