Dell Technologies Unity: Management IP address in alert email Subject line, or message body is a security issue (Dell Correctable)

Résumé: Unity Connect Home, or Dial Home email messages received by customer email accounts have the Unity Management IP address in the subject line. This is also seen in the body of the email alert in some scenarios. This is considered a security risk if the information is received or stolen during an information breach. This knowledgebase article describes the resolution. ...

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.
Consulter d’autres ressources

Symptômes

Once a Unity system is configured to receive email alerts or setup for Secure Remote Services, a system event generates alerts for Connect Home or Dial Home. The alert email is sent back to the customer through any added customer emails or aliases.

Below is an example of what is seen:
  
To alias-Storage <Company-alias-Storage@yourcompany.com>
You have received this message because an event that has occurred on your Unity (APMxxxxxxxxxx/X.X.X.X) system requires your attention. 
The alert is:
Alert Text: ESRS is enabled but is not able to connect to EMC.
Message Id: 14:46000d
Timestamp: Sun 2023-02-05 10:47:10 PM
Log in to Unisphere to learn more about this alert. Click EVENTS > Alerts, and then select the alert to view the details. You can then go to other related pages to further investigate the situation.

**above names and IP addresses were made generic or masked.

Cause

Analysis determined that earlier versions of Unity code used the information as a standard template that was inadvertently sent out in alert emails to the customer emails or aliases. Dell servers did not receive any emails with the information.

Résolution

Upgrade to Unity OE code 5.2.x and higher to resolve this issue.

Produits concernés

Dell EMC Unity
Propriétés de l’article
Numéro d’article: 000209816
Type d’article: Solution
Dernière modification: 26 Jun 2023
Version:  3
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.