Password Storage Vulnerability in Dell EMC Integrated Data Protection Appliance
CVE-2019-3736

8.2HIGH

Key Information:

Vendor
Dell
Status
Integrated Data Protection Appliance
Vendor
CVE Published:
27 September 2019

Summary

The Dell EMC Integrated Data Protection Appliance prior to version 2.3 suffers from a vulnerability in its ACM component that allows remote authenticated users with root privileges to exploit a support tool aimed at decrypting locally stored encrypted passwords. This could enable these users to gain unauthorized access to other components, leveraging the privileges of the compromised user, and posing significant risks to the security and integrity of the system.

Affected Version(s)

Integrated Data Protection Appliance prior to 2.3

References

https://www.dell.com/support/security/en-us/details/53636...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.