Plain-Text Password Storage Issue in Dell EMC Repository Manager

CVE-2020-5315

Summary

Dell EMC Repository Manager version 3.2 has a vulnerability that allows sensitive credentials, specifically proxy server user passwords, to be stored in plain text within a local database. This poses significant risks, as a local authenticated attacker with access to the file system can exploit the stored passwords, potentially gaining unauthorized access to systems with the same privileges as the compromised account. Effective security measures should be implemented to avoid risks associated with sensitive data exposure.

References