EMC NetWorker Module for MEDITECH CVE-2014-4620 Local Information Disclosure Vulnerability

Bugtraq ID:	70726
Class:	Design Error
CVE:	CVE-2014-4620
Remote:	No
Local:	Yes
Published:	Oct 22 2014 12:00AM
Updated:	Oct 22 2014 12:00AM
Credit:	EMC
Vulnerable:	EMC NetWorker Module for MEDITECH 3.0 builds 90 EMC NetWorker Module for MEDITECH 3.0 builds 87
Not Vulnerable:	EMC NetWorker Module for MEDITECH 8.2 Build 479 EMC NetWorker Module for MEDITECH 3.0 build 92

EMC NetWorker Module for MEDITECH CVE-2014-4620 Local Information Disclosure Vulnerability

EMC NetWorker Module for MEDITECH is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.

EMC NetWorker Module for MEDITECH CVE-2014-4620 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC NetWorker Module for MEDITECH CVE-2014-4620 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC NetWorker Module for MEDITECH CVE-2014-4620 Local Information Disclosure Vulnerability

References:

• EMC Homepage (EMC)
  
• ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure (EMC)