CVE-2023-28045CWE-311

CVE-2023-28045

Medium · published May 19, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2023-05-19T13:15Z
Affected products (1)
ProductVersionsFixed in
dell/aiops_collector≥ 1.10.2, < 1.10.171.10.17
References (2)
https://www.dell.com/support/kbdoc/en-us/000213696/dsa-2023-165-dell-cloudiq-collector-security-update-for-missing-encryption-of-sensitive-data-vulnerability · [email protected]https://www.dell.com/support/kbdoc/en-us/000213696/dsa-2023-165-dell-cloudiq-collector-security-update-for-missing-encryption-of-sensitive-data-vulnerability · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 MAY 08:35Z
    Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability
    cvelistv5