CVE-2014-4620

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
VendorProductVersion
meditechmeditech
3.0:87
meditechmeditech
3.0:90
emcnetworker
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756
http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756