CVE-2013-3285: emc networker Cryptographic Issues

Vulnerability summary

CVE-2013-3285 is a low (CVSS 3.5) Cryptographic Issues vulnerability in emc networker. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.1% of scored vulnerabilities.

Timeline

1. 02-11-2013
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.

• CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.