CVE-2019-3741: dell emc unity Protection Mechanism Failure
Vulnerability summary
CVE-2019-3741 is a high (CVSS 7.8) Protection Mechanism Failure vulnerability in dell emc unity. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.5% of scored vulnerabilities.
Timeline
- 18-07-2019PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability. A Unisphere user’s (including the admin privilege user) password is stored in a plain text in Unity Data Collection bundle (logs files for troubleshooting). A local authenticated attacker with access to the Data Collection bundle may use the exposed password to gain access with the privileges of the compromised user.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell2 products
- emc_unity_operating_environment< 5.0.0.0.5.116
- emc_unityvsa_operating_environment< 5.0.0.0.5.116
Dell emc1 product
- unity≥ 5.0, < 5.0.0.0.5.116
2 vendors · 3 products