Dell NetWorker Vulnerability Could Lead to Information Disclosure

CVE-2024-42422

What is CVE-2024-42422?

An authorization bypass vulnerability in Dell NetWorker, specifically in version 19.10, allows unauthenticated remote attackers to exploit user-controlled keys. Successful exploitation could lead to unauthorized access and potential information disclosure, posing significant risks for data integrity and confidentiality. Organizations using this software should immediately evaluate their security posture and apply necessary updates to mitigate this vulnerability.

References