CVE-2019-3736CWE-257

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component

High · published September 27, 2019

CVSS v3.0
8.2
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00700 · 52.6th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2019-09-27T20:19Z
EPSS history
Timeline
  • 27 SEP 20:19Z
    Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component
    cvelistv5