CVE-2019-3736

8.2HIGH

Key Information:

Vendor
Dell
Status
Integrated Data Protection Appliance
Vendor
CVE Published:
27 September 2019

Summary

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.

Affected Version(s)

Integrated Data Protection Appliance prior to 2.3

References

https://www.dell.com/support/security/en-us/details/53636...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.