EMC Data Protection Advisor Account Credentials Local Information Disclosure Vulnerability

Bugtraq ID:	48912
Class:	Design Error
CVE:	CVE-2011-1742
Remote:	No
Local:	Yes
Published:	Jul 27 2011 12:00AM
Updated:	Jul 27 2011 12:00AM
Credit:	Reported by vendor.
Vulnerable:	EMC Data Protection Advisor 5.8 EMC Data Protection Advisor 5.7.1
Not Vulnerable:	EMC Data Protection Advisor 5.8.1

EMC Data Protection Advisor Account Credentials Local Information Disclosure Vulnerability

EMC Data Protection Advisor is prone to a local information-disclosure vulnerability.

Successful exploits will allow attackers to gain access to the contents of configuration file. This may lead to further attacks.

Versions prior to EMC Data Protection Advisor 5.8.1 are vulnerable.

EMC Data Protection Advisor Account Credentials Local Information Disclosure Vulnerability

Attackers need a local interactive access to the affected computer to exploit this issue.

EMC Data Protection Advisor Account Credentials Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for details.

EMC Data Protection Advisor Account Credentials Local Information Disclosure Vulnerability

References:

• EMC Data Protection Advisor Homepage (EMC)
  
• EMC Homepage (EMC)
  
• ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vuln (EMC)