NetSight
low2.1

CVE-2011-4142

The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials i…

Impact

The Web Search feature in EMC SourceOne Email Management 6.5 before 6.5.2.4033, 6.6 before 6.6.1.2194, and 6.7 before 6.7.2.2033 places cleartext credentials in log files, which allows local users to obtain sensitive information by reading these files.

Affected products

VendorProductAffected versions
EmcSourceone Email Management
through 6.5.2.3668
through 6.6.1.2108
through 6.7.2.0017
Versions 6.5, 6.6, 6.6.0.1209

Weakness classification

References