CVE-2012-2284

EMC NetWorker Module for Microsoft Applications <2.2.1, 2.3<122, 2.4<375 - Cleartext Credential Exposure

Title source: llm

Description

The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/86157

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/50957

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/55883

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027647

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html

Scores

EPSS 0.0007

EPSS Percentile 21.7%

Details

CWE

CWE-255

Status published

Products (3)

emc/networker_module_for_microsoft_applications 2.2.1

emc/networker_module_for_microsoft_applications 2.3

emc/networker_module_for_microsoft_applications 2.4

Published Oct 18, 2012

Tracked Since Feb 18, 2026