Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9qwc-8pqf-mrxv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

EPSS

Процентиль: 5%
0.00021
Низкий

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 6.4
nvd
почти 5 лет назад

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

EPSS

Процентиль: 5%
0.00021
Низкий

Дефекты

CWE-312