Skip to content
Sign in
4.8 Medium

CVE-2024-25957 Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability…

Description

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

Affected products and versions

Product Affected versions Fixed in
Grab for Windows 5.0 earliest → < 5.0.5 5.0.5

Other CVEs of Grab for Windows

The 3 CVEs of Grab for Windows →
CVE-2024-25956 Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability 5.5 Medium CVE-2024-25958 Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability 6.7 Medium
Track this CVE