Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
References
Configurations
History
27 Jan 2025, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dell
Dell openmanage Enterprise Update Manager |
|
| CWE | CWE-522 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| References | () https://www.dell.com/support/kbdoc/en-us/000224849/dsa-2024-209-security-update-for-dell-update-manager-plugin-vulnerability - Vendor Advisory | |
| CPE | cpe:2.3:a:dell:openmanage_enterprise_update_manager:*:*:*:*:*:*:*:* |
08 May 2024, 17:05
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-08 16:15
Updated : 2025-01-27 18:43
NVD link : CVE-2024-28971
Mitre link : CVE-2024-28971
JSON object : View
Products Affected
dell
- openmanage_enterprise_update_manager
CWE
CWE-522
Insufficiently Protected Credentials