CVE-2024-25957CWE-532

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module

Medium · published March 26, 2024

CVSS v3.1
4.8
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-03-26T15:26Z
EPSS history
Timeline
  • 26 MAR 15:26Z
    Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module
    cvelistv5