PT-2024-22644 · Dell · Dell Openmanage Enterprise

Published 2024-04-29 · Updated 2025-02-03 · CVE-2024-28961

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions 4.0.0 through 4.0.1

Description A sensitive information disclosure issue exists, allowing a local low privileged malicious user to potentially exploit this and obtain credentials. This could lead to unauthorized access with elevated privileges and further attacks.

Recommendations For versions 4.0.0 and 4.0.1, upgrade to a newer version at the earliest opportunity to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

CVE-2024-28961

Affected Products

Dell Openmanage Enterprise

References · 7

• https://osv.dev/vulnerability/CVE-2024-28961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28961 · Security Note
• https://dell.com/support/kbdoc/en-us/000224251/dsa-2024-184-security-update-for-dell-openmanage-enterprise-vulnerability · Vendor Advisory
• https://t.me/cvenotify/109756 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1784897309878239371 · Twitter Post
• https://twitter.com/CVEnew/status/1784865470962704849 · Twitter Post
• https://t.me/cvenotify/78350 · Telegram Post