First published: Sat Dec 28 2013(Updated: )
EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
EMC Watch4Net | <=6.2 | |
EMC Watch4Net | =6.0 | |
EMC Watch4Net | =6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-6181 is classified as a moderate severity vulnerability due to the potential exposure of sensitive information.
To fix CVE-2013-6181, upgrade EMC Watch4Net to version 6.3 or newer.
CVE-2013-6181 allows local users to access cleartext polled-device passwords, leading to information disclosure.
CVE-2013-6181 affects installations of EMC Watch4Net versions prior to 6.3.
CVE-2013-6181 requires local access to exploit, making it less of a remote threat.