Skip to content
OpenAdvisories
Medium · 6.4 CVE-2022-29085 EUVD-2022-33496GHSA-pgv4-5r2v-vqfp

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certa…

Published Jun 2, 2022 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

Affected products

VendorProductAffectedFixed
Dell Unity unspecified – < 5.2.0.0.5.173 5.2.0.0.5.173

References