Information Disclosure Vulnerability in Dell vApp Manager
CVE-2023-48671

7.5HIGH

Key Information:

Vendor
Dell
Status
vApp Manager
Vendor
CVE Published:
14 December 2023

Summary

Dell vApp Manager versions prior to 9.2.4.x are susceptible to an information disclosure vulnerability. This security issue may allow a remote attacker to access sensitive information, which could facilitate further attacks on the affected systems. It is crucial for users of impacted versions to apply the latest updates to mitigate potential threats effectively.

Affected Version(s)

vApp Manager Versions prior to 9.2.4.x

References

https://www.dell.com/support/kbdoc/en-us/000220427/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell Technologies would like to thank 33a6099 for reporting these issues.
.