CVE-2024-39582

Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000228412/dsa-2024-360-security-update-for-dell-powerscale-insightiq-for-multiple-security-vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:insightiq:5.0:*:*:*:*:*:*:*

History

16 Sep 2024, 15:36

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~2.3~~	v2 : unknown v3 : 4.4
CPE		cpe:2.3:a:dell:insightiq:5.0:::::::*
First Time		Dell Dell insightiq
References	~~() https://www.dell.com/support/kbdoc/en-us/000228412/dsa-2024-360-security-update-for-dell-powerscale-insightiq-for-multiple-security-vulnerabilities -~~	() https://www.dell.com/support/kbdoc/en-us/000228412/dsa-2024-360-security-update-for-dell-powerscale-insightiq-for-multiple-security-vulnerabilities - Vendor Advisory

10 Sep 2024, 12:09

Type	Values Removed	Values Added
Summary		(es) Dell PowerScale InsightIQ, versión 5.0, contiene una vulnerabilidad de uso de credenciales codificadas. Un atacante con privilegios elevados y acceso local podría aprovechar esta vulnerabilidad, lo que provocaría la divulgación de información.

10 Sep 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-10 09:15

Updated : 2024-09-16 15:36

NVD link : CVE-2024-39582

Mitre link : CVE-2024-39582

CVE.ORG link : CVE-2024-39582

JSON object : View

Products Affected

dell

insightiq

CWE

CWE-798

Use of Hard-coded Credentials

4.4 /10