VULNERABILITY INTELLIGENCE

CVE-2014-0646

CVSS score6.9 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2014-05-01
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by reading log files.

Primary references