Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18...
High severity
Unreviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 29, 2023
Description
Published by the National Vulnerability Database
Jul 28, 2021
Published to the GitHub Advisory Database
May 24, 2022
Last updated
Jan 29, 2023
Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only privileges.
References