PT-2022-18105
CVE-2022-26856
·
Published
2022-04-21
·
Updated
2022-05-03
Description by
CVSS 3.1
8.2
HighMetricsAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Dell EMC Repository Manager version 3.4.0
Description
The issue concerns a plain-text password storage vulnerability. A local attacker could exploit this, potentially leading to the disclosure of certain user credentials. The exposed credentials may allow access to the vulnerable application's database with the privileges of the compromised account.
Recommendations
For Dell EMC Repository Manager version 3.4.0, update to a version that addresses the plain-text password storage issue to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾