CVE-2014-0646

EPSS 0.05%
Published 01.05.2014 17:29:56
Last modified 12.04.2025 10:46:40
Source security_alert@emc.com
Teams watchlist Login
Open Login

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Rsa Access Manager Version6.1 Updatesp3

Emc ≫ Rsa Access Manager Version6.1 Updatesp4

Emc ≫ Rsa Access Manager Version6.2 Update-

Emc ≫ Rsa Access Manager Version6.2 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.131

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2014-04/0191.html

https://nvd.nist.gov/vuln/detail/CVE-2014-0646

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0646

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0646

EUVD