Plain-Text Password Vulnerability in Dell EMC PowerStore

CVE-2020-29501

What is CVE-2020-29501?

Dell EMC PowerStore versions below 1.0.3.0.5.007 are susceptible to a vulnerability that involves storing user credentials in plain text. This flaw can be exploited by a locally authenticated attacker to extract sensitive passwords, potentially granting unauthorized access to the application with the privileges of the compromised account. It highlights the critical need for secure password management practices within PowerStore environments.

References