CVE-2025-43938
BaseFortify
Publication date: 2025-09-10
Last updated on: 2025-10-20
Assigner: Dell
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dell | powerprotect_data_manager | to 19.21 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-256 | The product stores a password in plaintext within resources such as memory or files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Dell PowerProtect Data Manager versions 19.19 and 19.20 for Hyper-V involves the plaintext storage of a password. A high privileged attacker with local access could exploit this to disclose certain user credentials, potentially allowing unauthorized access with the privileges of the compromised account.
How can this vulnerability impact me? :
If exploited, this vulnerability could lead to the disclosure of user credentials, enabling an attacker to gain unauthorized access with the privileges of the compromised account. This could result in unauthorized actions or access to sensitive data within the affected system.