Plain-Text Password Storage Issue in Dell EMC PowerStore

CVE-2020-29502

Summary

Dell EMC PowerStore, specifically in versions prior to 1.0.3.0.5.007, exhibits a vulnerability that allows for the storage of user passwords in plaintext. This poses a risk wherein locally authenticated attackers may exploit the vulnerability to access sensitive user credentials. If successfully compromised, these credentials could grant unauthorized access to the application, allowing the attacker to act with the privileges of the affected user.

References