CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Permissions Privileges and Access Controls
Summary: ibm scale out network attached storage (sonas) 1.3 before 1.3.2.3 requires cleartext storage of ldap credentials without recommending a less privileged ldap account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2013-04-07
Last Modified Date: 2017-08-29