CVE-2014-0646
First published: Thu May 01 2014(Updated: )
The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC RSA Access Manager | =6.1-sp3 | |
| EMC RSA Access Manager | =6.1-sp4 | |
| EMC RSA Access Manager | =6.2 | |
| EMC RSA Access Manager | =6.2-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/first-publish-date
- agent/source
- vendor/emc
- canonical/emc rsa access manager
- version/emc rsa access manager/6.1-sp3
- version/emc rsa access manager/6.1-sp4
- version/emc rsa access manager/6.2
- version/emc rsa access manager/6.2-sp1