VULNERABILITY INTELLIGENCE

CVE-2014-4620

CVSS score2.1 LOW
EPSS probability0.53%
CISA KEVNot currently listed
Published2014-10-25
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references