PT-2020-9964
CVE-2019-18576
·
تاريخ النشر
2020-03-13
·
تاريخ التحديث
2020-03-18
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Dell EMC XtremIO XMS versions prior to 6.3.0
Description:
The issue allows malicious local users with access to log files to potentially gain access to XtremIO with the privileges of a compromised user, as OS users' passwords are logged in local files.
Recommendations:
For versions prior to 6.3.0, update to version 6.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exposed passwords being used by malicious users.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾