Dell Technologies Unity: Management IP address in alert email Subject line, or message body is a security issue (Dell Correctable)
Summary: Unity Connect Home, or Dial Home email messages received by customer email accounts have the Unity Management IP address in the subject line. This is also seen in the body of the email alert in some scenarios. This is considered a security risk if the information is received or stolen during an information breach. This knowledgebase article describes the resolution. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
Once a Unity system is configured to receive email alerts or setup for Secure Remote Services, a system event generates alerts for Connect Home or Dial Home. The alert email is sent back to the customer through any added customer emails or aliases.
Below is an example of what is seen:
**above names and IP addresses were made generic or masked.
Below is an example of what is seen:
To alias-Storage <Company-alias-Storage@yourcompany.com> You have received this message because an event that has occurred on your Unity (APMxxxxxxxxxx/X.X.X.X) system requires your attention. The alert is: Alert Text: ESRS is enabled but is not able to connect to EMC. Message Id: 14:46000d Timestamp: Sun 2023-02-05 10:47:10 PM Log in to Unisphere to learn more about this alert. Click EVENTS > Alerts, and then select the alert to view the details. You can then go to other related pages to further investigate the situation.
**above names and IP addresses were made generic or masked.
Cause
Analysis determined that earlier versions of Unity code used the information as a standard template that was inadvertently sent out in alert emails to the customer emails or aliases. Dell servers did not receive any emails with the information.
Resolution
Upgrade to Unity OE code 5.2.x and higher to resolve this issue.
Affected Products
Dell EMC UnityArticle Properties
Article Number: 000209816
Article Type: Solution
Last Modified: 26 Jun 2023
Version: 3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.