漏洞标题
戴尔易安信集成数据保护设备未文档化的账户漏洞
漏洞描述信息
戴尔EMC集成数据保护设备未记录的帐户漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability
漏洞描述信息
Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Dell EMC Integrated Data Protection Appliance 安全漏洞
漏洞描述信息
Dell EMC Integrated Data Protection Appliance是美国戴尔(Dell)公司的一套基于磁盘的备份和恢复解决方案。 Dell EMC Integrated Data Protection Appliance 2.0、2.1及2.2版本中存在安全漏洞,该漏洞源于‘support’和‘admin’账户(可访问特定的系统文件)使用默认密码。攻击者可通过已知的密码利用该漏洞登录系统并获取特定系统文件的读和写权限。
CVSS信息
N/A
漏洞类别
授权问题