Description
RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox.
References
- 20110823 ESA-2011-030: RSA, The Security Division of EMC, announces security fixes for RSA enVision mailing-list
- 8350 third-party-advisory
- 1025979 vdb-entry