what you don't know can hurt you

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure
Posted Oct 24, 2014
Site emc.com

A vulnerability exists in the EMC NetWorker Module for MEDITECH when used with EMC RecoverPoint that could potentially allow exposure of sensitive information. EMC NetWorker Module for MEDITECH (NMMEDI) version 3.0 builds 87-90 are affected.

tags | advisory
advisories | CVE-2014-4620
MD5 | aa65b78bb0d1be903c24cc4f45b39123

EMC NetWorker Module For MEDITECH (NMMEDI) Information Disclosure

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure Vulnerability

EMC Identifier: ESA-2014-087

CVE Identifier: CVE-2014-4620

Severity Rating: CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Affected products:
• EMC NetWorker Module for MEDITECH (NMMEDI) version 3.0 builds 87-90.

Summary:

A vulnerability exists in the EMC NetWorker Module for MEDITECH when used with EMC RecoverPoint that could potentially allow exposure of sensitive information.

Details:
As part of changes implemented in NMMEDI 3.0 build 87, Plink commands print RecoverPoint Appliance logon IDs and passwords in clear text in the NMMEDI log files.

Resolution:
The following EMC NetWorker products contain resolutions to this issue:
• EMC NetWorker Module for MEDITECH 3.0 build 92 or later
• EMC NetWorker Module for MEDITECH 8.2 Build 479 (Windows x64) or later
(Important! For NMMEDI 8.2, review the NetWorker Software Compatibility Guide for information on product compatibility).

To address this issue, customers must perform the following steps:
1. Change the RecoverPoint password (Refer to RecoverPoint documentation for steps)
2. Delete all occurrences of disclosed logged password:
a. From the nsr/applogs folder on the NMMEDI machine delete the existing nsrmedisv.raw logs.
b. Delete any existing rendered log files.
c. Ensure that above logs copied or uploaded to any additional location are also deleted.
Note: The nsrmedisv.raw file can be found in the“C:\Program Files\Legato\nsr\applogs” or “C:\Program Files\EMC NetWorker\nsr\applogs” directory of the server where NMMEDI has been installed.
3. Install NMMEDI 3.0 build 92 or NMMEDI 8.2
4. Reconfigure new RecoverPoint password in NMMEDI User Interface
5. Run the backups.
EMC strongly recommends all customers apply above mitigation steps at the earliest opportunity.

Link to remedies:

EMC NMMEDI Software and Information: To download software and obtain additional information for NMMEDI, refer to support.emc.com. Select “Support by Product” and type “NetWorker Module for MEDITECH”. From this page select “Downloads,” “Documentation” or “Advisories” as required.
Note: to obtain NMMEDI v3.0 build 92, DO NOT download NMMEDI v3.0 Full Release versions from download link. Expand UPDATES menu and select NetWorker Module for MEDITECH 3.0 Cumulative Hotfixes link.


EMC RecoverPoint Software and Information: To download software and obtain additional information for RecoverPoint, refer to support.emc.com. Select “Support by Product” and type “RecoverPoint”. Select your RecoverPoint product. From this page select “Downloads,” “Documentation” or “Advisories” as required.

EMC Product Security Response Center
security_alert@emc.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (Cygwin)

iEYEARECAAYFAlRHvrcACgkQtjd2rKp+ALwfAQCfdwenOyA6/lDPgQH7cgA6J37N
3hUAoMuwPV6TgbG2MJknaJKkAvR9/MzS
=HPFH
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

August 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    3 Files
  • 2
    Aug 2nd
    2 Files
  • 3
    Aug 3rd
    32 Files
  • 4
    Aug 4th
    22 Files
  • 5
    Aug 5th
    15 Files
  • 6
    Aug 6th
    19 Files
  • 7
    Aug 7th
    6 Files
  • 8
    Aug 8th
    1 Files
  • 9
    Aug 9th
    2 Files
  • 10
    Aug 10th
    27 Files
  • 11
    Aug 11th
    11 Files
  • 12
    Aug 12th
    11 Files
  • 13
    Aug 13th
    17 Files
  • 14
    Aug 14th
    7 Files
  • 15
    Aug 15th
    0 Files
  • 16
    Aug 16th
    0 Files
  • 17
    Aug 17th
    0 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close