Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-3746 EUVD-2019-13381GHSA-3q4q-6vxp-x66f

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An a…

Published Sep 27, 2019 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system.

Affected products

VendorProductAffectedFixed
Dell Integrated Data Protection Appliance prior to 2.3 —

References