Plain-Text Password Storage Vulnerability in Dell EMC PowerStore

CVE-2020-29500

Summary

The Dell EMC PowerStore software has a vulnerability that allows locally authenticated attackers to access sensitive user credentials stored in plain text. This flaw can be exploited by an attacker to gain unauthorized access to the affected application, utilizing the compromised account's privileges. The issue is present in versions prior to 1.0.3.0.5.007, highlighting the importance of updating the system to mitigate potential exploitation risks.

References