Dell PowerProtect Data Manager Plaintext Password Storage Vulnerability in Hyper-V

A vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20 for Hyper-V, related to the plaintext storage of passwords. This vulnerability allows a high-privileged attacker with local access to potentially disclose certain user credentials. The exposed credentials could be used to gain unauthorized access with the privileges of the compromised account.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of user credentials, allowing access to systems or data with the compromised account's privileges.

Remediation

Users can upgrade to Dell PowerProtect Data Manager version 19.21.0-11 or later. Instructions for downloading this version are available on the Dell PowerProtect Data Manager Drivers & Downloads page.