CVE-2021-42370

Name of the Vulnerable Software and Affected Versions XoruX LPAR2RRD versions prior to 7.30 STOR2RRD versions prior to 7.30

Description A password mismanagement situation exists because cleartext information is present in HTML password input fields in the device properties. Viewing the passwords requires configuring a web browser to display HTML password input fields.

Recommendations For XoruX LPAR2RRD versions prior to 7.30, update to version 7.30 or later to resolve the issue. For STOR2RRD versions prior to 7.30, update to version 7.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the device properties page to minimize the risk of exploitation.