exploit the possibilities

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure
Posted Oct 24, 2014
Site emc.com

A vulnerability exists in the EMC NetWorker Module for MEDITECH when used with EMC RecoverPoint that could potentially allow exposure of sensitive information. EMC NetWorker Module for MEDITECH (NMMEDI) version 3.0 builds 87-90 are affected.

tags | advisory
advisories | CVE-2014-4620
MD5 | aa65b78bb0d1be903c24cc4f45b39123

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure Vulnerability

EMC Identifier: ESA-2014-087

CVE Identifier: CVE-2014-4620

Severity Rating: CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Affected products:
• EMC NetWorker Module for MEDITECH (NMMEDI) version 3.0 builds 87-90.

Summary:

A vulnerability exists in the EMC NetWorker Module for MEDITECH when used with EMC RecoverPoint that could potentially allow exposure of sensitive information.

Details:
As part of changes implemented in NMMEDI 3.0 build 87, Plink commands print RecoverPoint Appliance logon IDs and passwords in clear text in the NMMEDI log files.

Resolution:
The following EMC NetWorker products contain resolutions to this issue:
• EMC NetWorker Module for MEDITECH 3.0 build 92 or later
• EMC NetWorker Module for MEDITECH 8.2 Build 479 (Windows x64) or later
(Important! For NMMEDI 8.2, review the NetWorker Software Compatibility Guide for information on product compatibility).

To address this issue, customers must perform the following steps:
1. Change the RecoverPoint password (Refer to RecoverPoint documentation for steps)
2. Delete all occurrences of disclosed logged password:
a. From the nsr/applogs folder on the NMMEDI machine delete the existing nsrmedisv.raw logs.
b. Delete any existing rendered log files.
c. Ensure that above logs copied or uploaded to any additional location are also deleted.
Note: The nsrmedisv.raw file can be found in the“C:\Program Files\Legato\nsr\applogs” or “C:\Program Files\EMC NetWorker\nsr\applogs” directory of the server where NMMEDI has been installed.
3. Install NMMEDI 3.0 build 92 or NMMEDI 8.2
4. Reconfigure new RecoverPoint password in NMMEDI User Interface
5. Run the backups.
EMC strongly recommends all customers apply above mitigation steps at the earliest opportunity.

Link to remedies:

EMC NMMEDI Software and Information: To download software and obtain additional information for NMMEDI, refer to support.emc.com. Select “Support by Product” and type “NetWorker Module for MEDITECH”. From this page select “Downloads,” “Documentation” or “Advisories” as required.
Note: to obtain NMMEDI v3.0 build 92, DO NOT download NMMEDI v3.0 Full Release versions from download link. Expand UPDATES menu and select NetWorker Module for MEDITECH 3.0 Cumulative Hotfixes link.


EMC RecoverPoint Software and Information: To download software and obtain additional information for RecoverPoint, refer to support.emc.com. Select “Support by Product” and type “RecoverPoint”. Select your RecoverPoint product. From this page select “Downloads,” “Documentation” or “Advisories” as required.

EMC Product Security Response Center
security_alert@emc.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (Cygwin)

iEYEARECAAYFAlRHvrcACgkQtjd2rKp+ALwfAQCfdwenOyA6/lDPgQH7cgA6J37N
3hUAoMuwPV6TgbG2MJknaJKkAvR9/MzS
=HPFH
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close