CVE-2022-29085
Medium
Description
Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
SeverityMedium
CVSS6.4
Exploit probability—
ProductDell Unity Operating Environment
PublishedJun 2, 2022
First seenJun 2, 2022
Weakness typeCWE-256CWE-256
How to fix
Update
- dell unity_operating_environment5.2.0.0.5.173 or later
- dell unity_xt_operating_environment5.2.0.0.5.173 or later
- dell unityvsa_operating_environment5.2.0.0.5.173 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell unity_operating_environment | v < 5.2.0.0.5.173 | 5.2.0.0.5.173 |
| dell unity_xt_operating_environment | v < 5.2.0.0.5.173 | 5.2.0.0.5.173 |
| dell unityvsa_operating_environment | v < 5.2.0.0.5.173 | 5.2.0.0.5.173 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.