VULNERABILITY INTELLIGENCE

CVE-2017-8001

CVSS score8.4 HIGH

EPSS probability0.37%

CISA KEVNot currently listed

Published2017-11-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.

Weakness classification

CWE-532: Insertion of Sensitive Information into Log File

Primary references

security_alert@emc.com — Mailing List, Third Party Advisory
security_alert@emc.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry