high8.1
CVE-2022-29084
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI.
Impact
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access to the system as the victim. Account takeover is possible if weak passwords are used by users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Unity Operating Environment | before 5.2.0.0.5.173 |
| Dell | Unity Xt Operating Environment | before 5.2.0.0.5.173 |
| Dell | Unityvsa Operating Environment | before 5.2.0.0.5.173 |