Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.
| Software | From | Fixed in |
|---|---|---|
| dell / emc_integrated_data_protection_appliance_firmware | 2.0 | 2.0.x |
| dell / emc_integrated_data_protection_appliance_firmware | 2.1 | 2.1.x |
| dell / emc_integrated_data_protection_appliance_firmware | 2.2 | 2.2.x |