Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HDell Emc Data Protection Search
APPDell< 19.5Dell Emc Integrated Data Protection Appliance
APPDell< 2.7
Related vulnerabilities
RCE bez uwierzytelnienia w Dell EMC Avamar Server — command injection
SQL Injection w Dell EMC Avamar Server — nieautoryzowany dostęp do danych
RCE w Dell EMC Avamar Client Manager — zdalny dostęp bez uwierzytelnienia
Brak kontroli dostępu w Dell EMC Avamar Installation Manager — ujawnienie danych uwierzytelniających
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection App...