CVE-2019-18576
- State
- Published
- Severity
- 6.7 Medium
- Published
- Mar 13, 2020
- Updated
- Sep 16, 2024
- Reserved
- Oct 29, 2019
Description
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.7 Medium | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | dell |
Weaknesses
- CWE-532 Inclusion of Sensitive Information in Log Files
Affected Products
| Product | Versions |
|---|---|
XtremIODell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.