VULNERABILITY INTELLIGENCE

CVE-2024-28961

CVSS score6.3 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Description

Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.

Weakness classification

  • security_alert@emc.com: CWE-256
  • nvd@nist.gov: CWE-522

Primary references