CVE-2013-3287
Severity Score
1.9
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console.
EMC Unisphere para VMAX anterior a 1.6.1.6, cuando se utiliza un nivel no especificado del registro de depuración en las configuraciones de LDAP, permite a los usuarios locales descubrir la contraseña LDAP bind sin cifrar mediante la lectura de la consola.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-04-26 CVE Reserved
- 2013-10-30 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2013-10/0155.html | Mailing List | |
| http://www.securityfocus.com/bid/63425 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dell Search vendor "Dell" | Emc Unisphere Search vendor "Dell" for product "Emc Unisphere" | <= 1.6 Search vendor "Dell" for product "Emc Unisphere" and version " <= 1.6" | vmax |
Affected
| ||||||
| Dell Search vendor "Dell" | Emc Unisphere Search vendor "Dell" for product "Emc Unisphere" | 1.0 Search vendor "Dell" for product "Emc Unisphere" and version "1.0" | vmax |
Affected
| ||||||
| Dell Search vendor "Dell" | Emc Unisphere Search vendor "Dell" for product "Emc Unisphere" | 1.1 Search vendor "Dell" for product "Emc Unisphere" and version "1.1" | vmax |
Affected
| ||||||
| Dell Search vendor "Dell" | Emc Unisphere Search vendor "Dell" for product "Emc Unisphere" | 1.5 Search vendor "Dell" for product "Emc Unisphere" and version "1.5" | vmax |
Affected
| ||||||