EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
Weaknesses in this category are related to the management of credentials.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/519012/100/0/threaded | mailing list vdb entry third party advisory |
http://securityreason.com/securityalert/8318 | third party advisory |