Описание
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.10.2 (включая) до 1.10.17 (исключая)
cpe:2.3:a:dell:cloudiq_collector:*:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00088
Низкий
6.3 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-311
Связанные уязвимости
CVSS3: 6.3
github
больше 2 лет назад
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.
EPSS
Процентиль: 25%
0.00088
Низкий
6.3 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-311