Unrated severityNVD Advisory· Published Oct 25, 2014· Updated Jun 17, 2026

CVE-2014-4620

Description

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores cleartext RecoverPoint Appliance credentials in nsrmedisv.raw log files, which allows local users to obtain sensitive information by reading these files.

Affected products

EMC Corporation/Networker
cpe:2.3:a:emc:networker:*:*:*:*:*:*:*:*
Meditech/Meditech2 versions
cpe:2.3:a:meditech:meditech:3.0:87:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:meditech:meditech:3.0:87:*:*:*:*:*:*
- cpe:2.3:a:meditech:meditech:3.0:90:*:*:*:*:*:*
EMC Corporation/NetWorker Module for MEDITECHllm-fuzzy
Range: >=3.0 build 87, <=3.0 build 90

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2014-10/0145.htmlnvd
packetstormsecurity.com/files/128841/EMC-NetWorker-Module-For-MEDITECH-NMMEDI-Information-Disclosure.htmlnvd
secunia.com/advisories/61952nvd
www.securityfocus.com/bid/70726nvd
www.securitytracker.com/id/1031116nvd
exchange.xforce.ibmcloud.com/vulnerabilities/97756nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000