CVE-2020-5368CWE-862

Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability

Critical · published July 6, 2020

CVSS v3.1
9.8
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

🚨 An improper authentication flaw in Dell EMC VxRail versions 4.7.410 and 4.7.411 poses a massive risk! An attacker could snag sensitive information just waiting to be misused! 🔥 Imagine a restaurant that forgot to check IDs at the door. Once inside, anyone can peek at the confidential recipes stored in the kitchen—no one is stopping them! This vulnerability allows an unauthenticated remote attacker to access sensitive information in an encrypted format. This could lead to data exposure that’s not just embarrassing but could have dire consequences for your organization’s security and trust with customers.

Put simply

Imagine a restaurant that forgot to check IDs at the door. Once inside, anyone can peek at the confidential recipes stored in the kitchen—no one is stopping them! In VxRail, the flaw in authentication allows anyone to obtain sensitive data without requiring any authentication, meaning they don't even need to be inside the network to exploit it.

What to do

This vulnerability allows an unauthenticated remote attacker to access sensitive information in an encrypted format. This could lead to data exposure that’s not just embarrassing but could have dire consequences for your organization’s security and trust with customers. To protect your systems, patch to versions later than 4.7.411 immediately. Review your authentication protocols and ensure that sensitive information isn’t left vulnerable. Don’t forget to audit your system configurations! You've got this! Follow these steps, and you’ll be reinforcing your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01990 · 80.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2020-07-06T17:45Z
EPSS history
Timeline
  • 06 JUL 17:45Z
    Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability
    cvelistv5