Unscored severity · published Aug 1, 2011
CVE-2011-1742
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain…
–
CVSS
0.3%
EPSS
No
On KEV
Description
EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
Data Protection Advisor · Emc
through 5.8; 5.0; 5.6; 5.6.1; 5.7; 5.7; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1742
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1742
Third Party Advisory
http://securityreason.com/securityalert/8318
Third Party Advisory
http://www.securityfocus.com/archive/1/519012/100/0/threaded
More from Data Protection Advisor
9.8
CVE-2017-8013
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges
8.8
CVE-2017-10955
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0
8.8
CVE-2017-8002
EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities
7.8
CVE-2018-1206
Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with…
4.9
CVE-2017-8003
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability