DellCVE-2024-28961CVE-2024-28961
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
AI Score
Confidence
Low
EPSS
Percentile
9.0%
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | openmanage_enterprise | 4.0.0 | cpe:2.3:a:dell:openmanage_enterprise:4.0.0:*:*:*:*:*:*:* |
| dell | openmanage_enterprise | 4.0.1 | cpe:2.3:a:dell:openmanage_enterprise:4.0.1:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Dell OpenManage Enterprise",
"vendor": "Dell",
"versions": [
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
}
]
}
]Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
AI Score
Confidence
Low
EPSS
Percentile
9.0%