Products
Dell OpenManage Enterprise
- 4.0.0
- 4.0.1
Source
security_alert@emc.com
Tags
CVE-2024-28961 details
Published : April 29, 2024, 9:15 a.m.
Last Modified : April 29, 2024, 12:42 p.m.
Last Modified : April 29, 2024, 12:42 p.m.
Description
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.3 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Base Score
6.3
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
References
| URL | Source |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000224251/dsa-2024-184-security-update-for-dell-openmanage-enterprise-vulnerability | security_alert@emc.com |
This website uses the NVD API, but is not approved or certified by it.