CVE-2011-1742: Low severity dell emc data protection advisor vulnerability
Published Aug 1, 2011
·Updated
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
Affected Software
8 affected components
EMC Data Protection Advisor=5.7
EMC Data Protection Advisor=5.6
EMC Data Protection Advisor=5.0-sp1
EMC Data Protection Advisor=5.8-sp1
EMC Data Protection Advisor<=5.8
EMC Data Protection Advisor=5.7.1
EMC Data Protection Advisor=5.7-sp1
EMC Data Protection Advisor=5.6.1
Event History
Aug 1, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1742?
CVE-2011-1742 has a medium severity rating due to the exposure of sensitive credentials.
2
How do I fix CVE-2011-1742?
To fix CVE-2011-1742, upgrade EMC Data Protection Advisor to version 5.8.1 or later.
3
What impact does CVE-2011-1742 have on my system?
CVE-2011-1742 allows local users to access account credentials stored in cleartext, potentially compromising security.
4
Which versions of EMC Data Protection Advisor are affected by CVE-2011-1742?
CVE-2011-1742 affects versions of EMC Data Protection Advisor prior to 5.8.1, including versions 5.0-sp1, 5.6, 5.6.1, 5.7, and 5.8-sp1.
5
Is there a workaround for CVE-2011-1742 if I cannot upgrade?
There are no documented workarounds for CVE-2011-1742, so upgrading to a secure version is recommended.