CVE-2013-3285 Information disclosure in n/a

What is CVE-2013-3285?

CVE-2013-3285 is a low-severity vulnerability in n/a, published on 2 Nov 2013. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.

Weakness: CWE-310

Which versions are affected by CVE-2013-3285?

It affects 1 product.

Products include Emc Networker.

How do I fix CVE-2013-3285?

No fix has been published for CVE-2013-3285 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-3285 being exploited?

There is no known exploitation of CVE-2013-3285 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2006-3892 Auth bypass in n/a Critical 10.0
• CVE-2016-0916 Auth bypass in n/a Critical 9.8
• CVE-2012-4607 Memory corruption in n/a Critical 9.3
• CVE-2012-2288 Memory corruption in n/a Critical 9.3
• CVE-2012-0395 Memory corruption in n/a Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f9rg-f62m-hh9f.