CWE Code: 693
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Protection Mechanism Failure
Summary: dell emc unity and unityvsa versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability. a unisphere user?s (including the admin privilege user) password is stored in a plain text in unity data collection bundle (logs files for troubleshooting). a local authenticated attacker with access to the data collection bundle may use the exposed password to gain access with the privileges of the compromised user.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-07-18
Last Modified Date: 2019-10-10