8.2
High
CVE-2022-26856 Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability
Description
Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application's database with privileges of the compromised account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Repository Manager (DRM) | Versions not published |
Other CVEs of Dell Repository Manager (DRM)
The 5 CVEs of Dell Repository Manager (DRM) →
CVE-2025-45376
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or…
7.5
High
CVE-2023-22576
Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation…
7.0
High
CVE-2023-44292
Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module
6.7
Medium
CVE-2023-44282
Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module
6.7
Medium