CVE-2021-43590
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability. A local high privileged malicious user may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Dell EMC Enterprise Storage Analytics for vRealize Operations, versiones 4.0.1 a 6.2.1, contienen una vulnerabilidad de almacenamiento de contraseñas de texto plano. Un usuario local malicioso con altos privilegios puede explotar potencialmente esta vulnerabilidad, conllevando a una divulgación de determinadas credenciales de usuario. El atacante podría usar las credenciales expuestas para acceder a la aplicación vulnerable con los privilegios de la cuenta comprometida
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-12 CVE Reserved
- 2022-03-04 CVE Published
- 2023-09-25 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-256: Plaintext Storage of a Password
- CWE-312: Cleartext Storage of Sensitive Information
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.dell.com/support/kbdoc/en-us/000196329/dsa-2021 | 2022-03-12 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Enterprise Storage Analytics Search vendor "Dell" for product "Enterprise Storage Analytics" | >= 4.0.1 <= 6.2.1 Search vendor "Dell" for product "Enterprise Storage Analytics" and version " >= 4.0.1 <= 6.2.1" | vrealize_operations |
Affected
|