Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-25957

Опубликовано: 26 мар. 2024
Источник: nvd
CVSS3: 4.8
CVSS3: 5.5
EPSS Низкий

Описание

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:grab:*:*:*:*:*:windows:*:*
Версия до 5.0.5 (исключая)

EPSS

Процентиль: 20%
0.00062
Низкий

4.8 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 4.8
github
почти 2 года назад

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

EPSS

Процентиль: 20%
0.00062
Низкий

4.8 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-532