Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges.
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Powerpath_management_appliance | Dell | 2.6 (including) | 2.6 (including) |
| Powerpath_management_appliance | Dell | 3.0 (including) | 3.0 (including) |
| Powerpath_management_appliance | Dell | 3.0-patch_01 (including) | 3.0-patch_01 (including) |
| Powerpath_management_appliance | Dell | 3.1 (including) | 3.1 (including) |
| Powerpath_management_appliance | Dell | 3.2 (including) | 3.2 (including) |