Plain-Text Password Storage Vulnerability in Dell PowerStore

CVE-2022-22557

What is CVE-2022-22557?

Dell PowerStore is affected by a security issue that involves the storage of passwords in plain text for versions 2.0.0.x and 2.0.1.x. A locally authenticated attacker can exploit this weakness to retrieve sensitive user credentials. Once compromised, these credentials may allow the attacker to access the PowerStore application with the same privileges as the compromised account. This presents a significant risk for unauthorized access and potential data breaches.

References