CVE-2013-3624

Published: Oct 3, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.

Affected (11)

Products: Baramundi: Management Suite

Baramundi

1 product

Management Suite

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Baramundi Management Suite	Version 7.5
Baramundi Management Suite	Version 7.6
Baramundi Management Suite	Version 8.0
Baramundi Management Suite	Version 8.1
Baramundi Management Suite	Version 8.2
Baramundi Management Suite	Version 8.3
Baramundi Management Suite	Version 8.5
Baramundi Management Suite	Version 8.6
Baramundi Management Suite	Version 8.7
Baramundi Management Suite	Version 8.8
Baramundi Management Suite	Version 8.9

Related CWEs

CWE-310

References (2)

http://www.kb.cert.org/vuls/id/392654

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/392654

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.