CVE Vulnerabilities

CVE-2025-21102

Plaintext Storage of a Password

Published: Jan 08, 2025 | Modified: Jan 24, 2025
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Weakness

Storing a password in plaintext may result in a system compromise.

Affected Software

Name Vendor Start Version End Version
Vxrail_d560_firmware Dell 7.0.000 (including) 7.0.533 (excluding)

Potential Mitigations

References