CVE-2019-18576
Last modified
CVE-2019-18576 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
Dell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability where OS users’ passwords are logged in local files. Malicious local users with access to the log files may use the exposed passwords to gain access to XtremIO with the privileges of the compromised user.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Xtremio Management Server | < 6.3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-18576?
How severe is CVE-2019-18576?
How do I fix CVE-2019-18576?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-1857A vulnerability in the web-based management interface of Cis…6.1
- CVE-2019-18571The RSA Identity Governance and Lifecycle and RSA Via Lifecy…5.4
- CVE-2019-18572The RSA Identity Governance and Lifecycle and RSA Via Lifecy…9.8
- CVE-2019-18573The RSA Identity Governance and Lifecycle and RSA Via Lifecy…8.8
- CVE-2019-18574RSA Authentication Manager software versions prior to 8.4 P8…4.8
- CVE-2019-18575Dell Command Configure versions prior to 4.2.1 contain an un…7.1
- CVE-2019-18577Dell EMC XtremIO XMS versions prior to 6.3.0 contain an inco…6.7
- CVE-2019-18578Dell EMC XtremIO XMS versions prior to 6.3.0 contain a store…9
- CVE-2019-18579Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions pri…6.8
- CVE-2019-1858A vulnerability in the Simple Network Management Protocol (S…8.6
- CVE-2019-18580Dell EMC Storage Monitoring and Reporting version 4.3.1 cont…10
- CVE-2019-18581Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.…7.2
Are you affected by CVE-2019-18576?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST