Man-in-the-Middle Vulnerability in Dell Unity VSA and Unity XT

CVE-2023-43082

Summary

Dell Unity prior to version 5.3 is susceptible to a man-in-the-middle vulnerability within its vmadapter component. This issue arises when a customer uses a certificate issued by a third-party public Certificate Authority. An attacker could exploit this vulnerability by spoofing the vCenter CA, provided they can obtain a CA-signed certificate. This could potentially compromise the security of user data and communications.

References