Vulnerabilities > CVE-2013-3278 - Credentials Management vulnerability in EMC products

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
local
low complexity
emc
CWE-255

Summary

EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.

Vulnerable Configurations

Part Description Count
Application
Emc
1
Hardware
Emc
3

Common Weakness Enumeration (CWE)