Description
EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors.
References
- 87878 vdb-entry
- 1027812 vdb-entry
- 51408 third-party-advisory
- 20121126 ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities mailing-list
- 56682 vdb-entry
- http://packetstormsecurity.org/files/118358/EMC-Smarts-Network-Configuration-Manager-Bypass.html