Unscored CVE-2015-0519 EUVD-2015-0532GHSA-7h8f-6p57-7qjm

The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext I…

Published Feb 14, 2015 · Updated Aug 6, 2024 · Assigned by dell

Description

The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file.

References

http://packetstormsecurity.com/files/130284/EMC-Captiva-Capture-Sensitive-Information-Disclosure.html
emc-captiva-cve20150519-info-disc(100748) vdb-entry
20150205 ESA-2015-012: EMC Captiva Capture Sensitive Information Disclosure Vulnerability mailing-list