EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-07-08 13:55
Updated : 2020-03-27 07:07
NVD link : CVE-2013-3273
Mitre link : CVE-2013-3273
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
rsa
- authentication_manager
emc
- rsa_authentication_manager