CVE-2013-0947 Information disclosure in n/a

What is CVE-2013-0947?

CVE-2013-0947 is a low-severity vulnerability in n/a, published on 7 Jun 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.

Weakness: CWE-255

Which versions are affected by CVE-2013-0947?

It affects 1 product.

Products include Rsa Authentication Manager.

How do I fix CVE-2013-0947?

No fix has been published for CVE-2013-0947 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-0947 being exploited?

There is no known exploitation of CVE-2013-0947 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-15782 DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability High 7.7
• CVE-2018-1247 XML external entity in RSA Authentication Manager Security Console High 7.1
• CVE-2018-1248 Open redirect in RSA Authentication Manager Security Console, Operation Console and Self-Service Console Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m7fj-x53w-pr9v.