CVE-2012-2284

The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html
http://osvdb.org/86157
http://www.securitytracker.com/id?1027647
http://www.securityfocus.com/bid/55883
http://secunia.com/advisories/50957

Advertisement

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.4:::::::*
	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.3:::::::*
	cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.2.1:::::::*

cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*

Information

Published : 2012-10-18 10:55

Updated : 2013-04-18 20:21

NVD link : CVE-2012-2284

Mitre link : CVE-2012-2284

JSON object : View

CWE

CWE-255

Credentials Management Errors

Advertisement

Products Affected

emc

networker_module_for_microsoft_applications

microsoft

exchange_server

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html", "name": "20121010 ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://osvdb.org/86157", "name": "86157", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.securitytracker.com/id?1027647", "name": "1027647", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/55883", "name": "55883", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/50957", "name": "50957", "tags": [], "refsource": "SECUNIA"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-255"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-2284", "ASSIGNER": "secure@dell.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-10-18T17:55Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:networker_module_for_microsoft_applications:2.2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2013-04-19T03:21Z"}