CVE-2014-4620

EUVD-2014-4546
The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
meditechmeditech
3.0:87
meditechmeditech
3.0:90
emcnetworker
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756
http://archives.neohapsis.com/archives/bugtraq/2014-10/0145.html
http://packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.html
http://secunia.com/advisories/61952
http://www.securityfocus.com/bid/70726
http://www.securitytracker.com/id/1031116
https://exchange.xforce.ibmcloud.com/vulnerabilities/97756