CVE-2024-53292

Description

Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable component with privileges of the compromised account.

PUBLISHED Reserved 2024-11-20 | Published 2024-12-11 | Updated 2024-12-11 | Assigner dell

Problem types

CWE-256: Plaintext Storage of a Password

Product status

References

www.dell.com/...l-plaintext-password-storage-vulnerabilities vendor-advisory

cve.org (CVE-2024-53292)

nvd.nist.gov (CVE-2024-53292)

Download JSON