8.4

CVE-2017-8001

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.

Data is provided by the National Vulnerability Database (NVD)
Dell ≫ Emc Scaleio Version2.0.1.0
   Linux ≫ Linux Kernel Version-
Dell ≫ Emc Scaleio Version2.0.1.1
   Linux ≫ Linux Kernel Version-
Dell ≫ Emc Scaleio Version2.0.1.2
   Linux ≫ Linux Kernel Version-
Dell ≫ Emc Scaleio Version2.0.1.3
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.209
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.

http://seclists.org/fulldisclosure/2017/Nov/35
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/101997
Third Party Advisory
VDB Entry