Read the docs
TI-2013-03166 Aliases CVE-2013-3624GHSA-938h-r443-c3jh

The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores…

Priority LOW 37CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.

Why it matters now

EPSS 0.01591 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:baramundi:management_suite:7.5:*:*:*:*:*:*:*7.5Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:7.6:*:*:*:*:*:*:*7.6Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.0:*:*:*:*:*:*:*8.0Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.1:*:*:*:*:*:*:*8.1Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.2:*:*:*:*:*:*:*8.2Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.3:*:*:*:*:*:*:*8.3Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.5:*:*:*:*:*:*:*8.5Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.6:*:*:*:*:*:*:*8.6Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.7:*:*:*:*:*:*:*8.7Vulnerablebaramundi
cpe:2.3:a:baramundi:management_suite:8.8:*:*:*:*:*:*:*8.8Vulnerablebaramundi
  • cpe:2.3:a:baramundi:management_suite:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.3:*:*:*:*:*:*:* Versions 8.3 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.5:*:*:*:*:*:*:* Versions 8.5 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.7:*:*:*:*:*:*:* Versions 8.7 Vulnerable ·baramundi
  • cpe:2.3:a:baramundi:management_suite:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·baramundi
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:baramundi:management_suite:8.9:*:*:*:*:*:*:*8.9Vulnerablebaramundi
  • cpe:2.3:a:baramundi:management_suite:8.9:*:*:*:*:*:*:* Versions 8.9 Vulnerable ·baramundi

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-3624
  2. 2026-10-03 Alias added: GHSA-938h-r443-c3jh

References

Advisory 1

  • TI-2022-21481 baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and… CVSS 3.1CRITICAL 9.8
  • TI-2013-03138 Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server… CVSS 2.0HIGH 7.8
  • TI-2013-03167 An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded… CVSS 2.0HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences