Description
The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network.
References
- avamar-service-utility-info-disclosure(66109) vdb-entry
- ADV-2011-0678 vdb-entry
- ADV-2011-0677 vdb-entry
- 20110315 ESA-2011-007: EMC Avamar sensitive information disclosure vulnerability mailing-list
- 43797 third-party-advisory
- 1025213 vdb-entry
- 8139 third-party-advisory
- 46879 vdb-entry