Brute Force Vulnerability in Dell EMC Integrated Data Protection Appliance

CVE-2019-3746

Summary

The Dell EMC Integrated Data Protection Appliance versions prior to 2.3 are susceptible to a brute-force authentication attack due to a lack of limit on authentication attempts to the ACM API. This allows an authenticated remote user to exploit the failure to restrict multiple login attempts, potentially leading to unauthorized access to sensitive system areas.

References