Description (CNA)
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain access to the application database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DELL EMC / ESRS Virtual Edition | affected unspecified before 3.32.00.08 |
CWE
No CWE identifiers supplied.
References
- https://seclists.org/fulldisclosure/2018/Oct/35
- http://www.securityfocus.com/bid/105694
- http://www.securitytracker.com/id/1041877
ADP enrichment
No English description supplied.