返回 CVE 瀏覽器

CVE-2012-2284

LOW

2.1

CVSS Severity Score

EPSS Score0.1530%

EPSS Percentile31.02th

Published2012年10月18日

Last Modified2026年4月29日

Vulnerability Description

The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors.

Affected Platforms (CPE)

📦

Emc

Networker Module For Microsoft Applications

= 2.2.1

📦

Emc

Networker Module For Microsoft Applications

= 2.3

📦

Emc

Networker Module For Microsoft Applications

= 2.4

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html

🔗 http://osvdb.org/86157

🔗 http://secunia.com/advisories/50957

🔗 http://www.securityfocus.com/bid/55883

🔗 http://www.securitytracker.com/id?1027647

🔗 http://archives.neohapsis.com/archives/bugtraq/2012-10/0068.html

🔗 http://osvdb.org/86157

🔗 http://secunia.com/advisories/50957

相關漏洞威脅

CVE-2011-064710.0

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x...

CVE-2012-22909.3

The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows r...

CVE-2008-62197.8

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...