Description (CNA)
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / Integrated Data Protection Appliance | affected prior to 2.3 |
CWE
CWE-257
References
ADP enrichment
No English description supplied.