CVE-2020-29500

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Score
CVSS 3.1 7.5 High
Status
Modified - security_alert@emc.com
Published
2021-01-05
Last modified
2024-09-17
Weaknesses
CWE-312

Affected products

References