What’s Vulnerable › Vulnerabilities
CVE-2013-3624
- Severity: high (CVSS 7.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2013-10-03 · updated 2026-06-16
- Weakness: CWE-310
Description
The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.
Affected products
- baramundi Management Suite: 7.5, 7.6, 8.0, 8.1, 8.2, 8.3 (+5)
References
Get alerted when CVE-2013-3624 or the next vulnerability affects your stack