CVE-2020-29501

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
References
Link Resource
https://www.dell.com/support/kbdoc/000180775 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:emc_powerstore_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerstore:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-01-05 22:15

Updated : 2024-02-28 18:08


NVD link : CVE-2020-29501

Mitre link : CVE-2020-29501

CVE.ORG link : CVE-2020-29501


JSON object : View

Products Affected

dell

  • emc_powerstore
  • emc_powerstore_firmware
CWE
CWE-312

Cleartext Storage of Sensitive Information