EMC Data Protection Advisor CVE-2017-8013 Hardcoded Password Information Disclosure Vulnerability

Bugtraq ID:	100846
Class:	Design Error
CVE:	CVE-2017-8013
Remote:	Yes
Local:	No
Published:	Sep 15 2017 12:00AM
Updated:	Sep 15 2017 12:00AM
Credit:	rgod
Vulnerable:	EMC Data Protection Advisor 6.4 EMC Data Protection Advisor 6.3
Not Vulnerable:	EMC Data Protection Advisor 6.4 patch 67 EMC Data Protection Advisor 6.3 patch 130

EMC Data Protection Advisor CVE-2017-8013 Hardcoded Password Information Disclosure Vulnerability

EMC Data Protection Advisor is prone to an information disclosure vulnerability.

An attacker can exploit this issue to gain sensitive information and perform unauthorized actions.

EMC Data Protection Advisor 6.3 and 6.4 are vulnerable.

EMC Data Protection Advisor CVE-2017-8013 Hardcoded Password Information Disclosure Vulnerability

Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

EMC Data Protection Advisor CVE-2017-8013 Hardcoded Password Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC Data Protection Advisor CVE-2017-8013 Hardcoded Password Information Disclosure Vulnerability

References:

• EMC Homepage (EMC)
  
• EMC Data Protection Advisor Application Service Static Credentials Authenticatio (Zero Day Initiative)
  
• ESA-2017-098: EMC Data Protection Advisor Hardcoded Password Vulnerability (EMC)