Skip to content
Sign in
3.5 Low

CVE-2024-28971 Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log…

Description

Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Affected products and versions

Product Affected versions Fixed in
Update Manager Plugin 1.4 1.4.0 → 1.5.0 No fix stated

Other CVEs of Update Manager Plugin

The 2 CVEs of Update Manager Plugin →
CVE-2025-22402 Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML… 2.6 Low
Track this CVE