EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Geosynchrony | Emc | * | 5.2 (including) |
| Vplex_geo | Emc | - (including) | - (including) |
| Vplex_local | Emc | - (including) | - (including) |
| Vplex_metro | Emc | - (including) | - (including) |