CVE-2011-4142

The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/archive/1/521290

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:sourceone_email_management:6.5:::::::*
	cpe:2.3:a:emc:sourceone_email_management:6.6.0.1209:::::::*
	cpe:2.3:a:emc:sourceone_email_management::::::::
	cpe:2.3:a:emc:sourceone_email_management:6.6:::::::*
	cpe:2.3:a:emc:sourceone_email_management:6.7:::::::*
	cpe:2.3:a:emc:sourceone_email_management::::::::
	cpe:2.3:a:emc:sourceone_email_management::::::::

Information

Published : 2012-01-19 03:55

Updated : 2012-01-19 03:55

NVD link : CVE-2011-4142

Mitre link : CVE-2011-4142

JSON object : View

CWE

CWE-255

Credentials Management Errors

Advertisement

Products Affected

emc

sourceone_email_management

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/archive/1/521290", "name": "20120117 ESA-2012-003: EMC SourceOne Web Search Sensitive Information Disclosure Vulnerability.", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-255"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-4142", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-01-19T11:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:6.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:6.6.0.1209:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.6.1.2108"}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:6.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:6.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.7.2.0017"}, {"cpe23Uri": "cpe:2.3:a:emc:sourceone_email_management:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.5.2.3668"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2012-01-19T11:55Z"}