CVE-2024-28961
- State
- Published
- Severity
- 6.3 Medium
- Published
- Apr 29, 2024
- Updated
- Aug 2, 2024
- Reserved
- Mar 13, 2024
Description
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.3 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L | dell |
Weaknesses
- CWE-256 Plaintext Storage of a Password
Affected Products
| Product | Versions |
|---|---|
Dell OpenManage EnterpriseDell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.