CVE-2014-0646 in EMC RSA Access Manager
Summary
The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.
Reservation
01/02/2014
Disclosure
05/01/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13144 | EMC RSA Access Manager Runtime WS cryptographic issue | 310 | Unproven | Official fix | CVE-2014-0646 |