CVE-2013-3624

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.

La funcionalidad OS deployment en Baramundi Management Suite versiones 7.5 hasta 8.9, almacena las credenciales del texto sin cifrar en las máquinas implementadas, lo que permite a los atacantes remotos obtener información confidencial mediante la lectura de un archivo. NOTA: este ID fue asignado incorrectamente a un problema separado en Oracle Outside In, pero el ID correcto para ese problema es CVE-2013-5763.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-10-03 CVE Published
2024-08-06 CVE Updated
2024-08-23 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (1)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/392654	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.5 Search vendor "Baramundi" for product "Management Suite" and version "7.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.6 Search vendor "Baramundi" for product "Management Suite" and version "7.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.0 Search vendor "Baramundi" for product "Management Suite" and version "8.0"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.1 Search vendor "Baramundi" for product "Management Suite" and version "8.1"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.2 Search vendor "Baramundi" for product "Management Suite" and version "8.2"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.3 Search vendor "Baramundi" for product "Management Suite" and version "8.3"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.5 Search vendor "Baramundi" for product "Management Suite" and version "8.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.6 Search vendor "Baramundi" for product "Management Suite" and version "8.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.7 Search vendor "Baramundi" for product "Management Suite" and version "8.7"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.8 Search vendor "Baramundi" for product "Management Suite" and version "8.8"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.9 Search vendor "Baramundi" for product "Management Suite" and version "8.9"		-		Affected