EMC Unisphere for VMAX Plain Text Password CVE-2013-3287 Local Information Disclosure Vulnerability

Bugtraq ID:	63425
Class:	Design Error
CVE:	CVE-2013-3287
Remote:	No
Local:	Yes
Published:	Oct 29 2013 12:00AM
Updated:	Oct 29 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	EMC Unisphere for VMAX 1.6 EMC Unisphere for VMAX 1.5 EMC Unisphere for VMAX 1.1 EMC Unisphere for VMAX 1.0
Not Vulnerable:	EMC Unisphere for VMAX 1.6.1.6

EMC Unisphere for VMAX Plain Text Password CVE-2013-3287 Local Information Disclosure Vulnerability

EMC Unisphere for VMAX is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information and gain privileged access to the protected resources. This may lead to other attacks.

EMC Unisphere for VMAX versions 1.0, 1.1, 1.5, 1.6 are vulnerable.

EMC Unisphere for VMAX Plain Text Password CVE-2013-3287 Local Information Disclosure Vulnerability

An attacker requires local interactive access to exploit the issue.

EMC Unisphere for VMAX Plain Text Password CVE-2013-3287 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC Unisphere for VMAX Plain Text Password CVE-2013-3287 Local Information Disclosure Vulnerability

References:

• Symmetrix VMAX Management HomePage (EMC)
  
• ESA-2013-074: EMC Unisphere for VMAX Information Disclosure Vulnerability (EMC)