CVE-2013-3624

Опубликовано: 03 окт. 2013

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.

Ссылки

http://www.kb.cert.org/vuls/id/392654
US Government Resource
http://www.kb.cert.org/vuls/id/392654
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:baramundi:management_suite:7.5:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:7.6:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.0:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.1:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.2:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.3:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.5:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.6:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.7:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.8:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.9:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00439

Низкий

7.8 High

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-938h-r443-c3jh

github

больше 3 лет назад