CWE Code: 522
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Insufficiently Protected Credentials
Summary: dell emc integrated data protection appliance versions prior to 2.3 contain a password storage vulnerability in the acm component. a remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-09-27
Last Modified Date: 2019-10-09