PT-2022-18105

CVE-2022-26856

·

Published

2022-04-21

·

Updated

2022-05-03

Description by

CVSS 3.1
8.2
High
MetricsAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell EMC Repository Manager version 3.4.0
Description The issue concerns a plain-text password storage vulnerability. A local attacker could exploit this, potentially leading to the disclosure of certain user credentials. The exposed credentials may allow access to the vulnerable application's database with the privileges of the compromised account.
Recommendations For Dell EMC Repository Manager version 3.4.0, update to a version that addresses the plain-text password storage issue to prevent potential exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾