8.8
High
CVE-2020-5315 Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage vulnerability
Description
Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with privileges of the compromised user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell EMC Repository Manager (DRM) | 3.3 | No fix stated |