Lucene search

K
nvd[email protected]NVD:CVE-2024-29177
HistoryJun 26, 2024 - 3:15 a.m.

CVE-2024-29177

2024-06-2603:15:10
CWE-532
web.nvd.nist.gov
8
dell powerprotect
vulnerability
unauthorized access

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

14.7%

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain unauthorized access to the application report.

Affected configurations

Nvd
Node
delldata_domain_operating_systemRange<7.7.5.40
OR
delldata_domain_operating_systemRange7.8.0.07.10.1.30
OR
delldata_domain_operating_systemRange7.11.0.07.13.1.0
VendorProductVersionCPE
delldata_domain_operating_system*cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

14.7%

Related for NVD:CVE-2024-29177