CVE-2011-1742
First published: Mon Aug 01 2011(Updated: )
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Data Protection Advisor | <=5.8 | |
| Dell EMC Data Protection Advisor | =5.0-sp1 | |
| Dell EMC Data Protection Advisor | =5.6 | |
| Dell EMC Data Protection Advisor | =5.6.1 | |
| Dell EMC Data Protection Advisor | =5.7 | |
| Dell EMC Data Protection Advisor | =5.7-sp1 | |
| Dell EMC Data Protection Advisor | =5.7.1 | |
| Dell EMC Data Protection Advisor | =5.8-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1742?
CVE-2011-1742 has a medium severity rating due to the exposure of sensitive credentials.
How do I fix CVE-2011-1742?
To fix CVE-2011-1742, upgrade EMC Data Protection Advisor to version 5.8.1 or later.
What impact does CVE-2011-1742 have on my system?
CVE-2011-1742 allows local users to access account credentials stored in cleartext, potentially compromising security.
Which versions of EMC Data Protection Advisor are affected by CVE-2011-1742?
CVE-2011-1742 affects versions of EMC Data Protection Advisor prior to 5.8.1, including versions 5.0-sp1, 5.6, 5.6.1, 5.7, and 5.8-sp1.
Is there a workaround for CVE-2011-1742 if I cannot upgrade?
There are no documented workarounds for CVE-2011-1742, so upgrading to a secure version is recommended.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/emc
- canonical/dell emc data protection advisor
- version/dell emc data protection advisor/5.8
- version/dell emc data protection advisor/5.0-sp1
- version/dell emc data protection advisor/5.6
- version/dell emc data protection advisor/5.6.1
- version/dell emc data protection advisor/5.7
- version/dell emc data protection advisor/5.7-sp1
- version/dell emc data protection advisor/5.7.1
- version/dell emc data protection advisor/5.8-sp1