CVE-2020-26199

MEDIUM Year: 2020
CVSS v3 Score
6.7
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-532
View all →

Vulnerability Description

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password is stored in a plain text in multiple log files. A local authenticated attacker with access to the log files may use the exposed password to gain access with the privileges of the compromised user.

Related Vulnerabilities

CVE-2019-18576

MEDIUM
CVSS:6.7(Medium)

Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may...

CWE-5322019

CVE-2021-36318

MEDIUM
CVSS:6.7(Medium)

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage...

CWE-5322021

CVE-2021-39913

MEDIUM
CVSS:6.7(Medium)

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before...

CWE-5322021

CVE-2021-43271

MEDIUM
CVSS:6.8(Medium)

Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, and 11.11.5a (when configured to use local, RADIUS, or TACACS authentication) log...

CWE-5322021

CVE-2024-22440

MEDIUM
CVSS:6.8(Medium)

A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosure of sensitive information in log files.

CWE-5322024

CVE-2024-22464

MEDIUM
CVSS:6.8(Medium)

Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote atta...

CWE-5322024