Vulnerability Description
Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Openmanage Enterprise Update Manager | >= 1.4.0, < 1.5.1 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000224849/dsa-2024-209-security-update-Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000224849/dsa-2024-209-security-update-Vendor Advisory
FAQ
What is CVE-2024-28971?
CVE-2024-28971 is a vulnerability with a CVSS score of 3.5 (LOW). Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerabili...
How severe is CVE-2024-28971?
CVE-2024-28971 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-28971?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Openmanage Enterprise Update Manager.