CVE-2013-3285

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-02 · updated 2026-06-16
Weakness: CWE-310

Description

The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources.

Affected products

EMC NetWorker prior to 8.2.4.9, 9.0.x (all supported versions), prior to 9.1.1.3, prior to 9.2.0.4: 8.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5 (+8)

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/0150.html
http://osvdb.org/99067
http://www.securityfocus.com/bid/63402
http://www.securitytracker.com/id/1029265
http://archives.neohapsis.com/archives/bugtraq/2013-10/0150.html
http://osvdb.org/99067
http://www.securityfocus.com/bid/63402
http://www.securitytracker.com/id/1029265

Get alerted when CVE-2013-3285 or the next vulnerability affects your stack