PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities - Patch, Vendor Advisory |
06 Jun 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dell
Dell powerpath |
|
| CPE | cpe:2.3:a:dell:powerpath:7.0:*:*:*:*:windows:*:* cpe:2.3:a:dell:powerpath:7.1:*:*:*:*:windows:*:* cpe:2.3:a:dell:powerpath:7.2:*:*:*:*:windows:*:* |
|
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
30 May 2023, 16:36
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-30 16:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32448
Mitre link : CVE-2023-32448
CVE.ORG link : CVE-2023-32448
JSON object : View
Products Affected
dell
- powerpath
CWE
CWE-312
Cleartext Storage of Sensitive Information