CVE-2015-6847

Description

The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this file.

References

http://www.securitytracker.com/id/1034169

http://seclists.org/bugtraq/2015/Nov/92

http://packetstormsecurity.com/files/134420/EMC-VPLEX-Sensitive-Information-Exposure.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS