6.3
Medium
CVE-2024-28961 Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability
Description
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell OpenManage Enterprise 4.0 | 4.0.0 → 4.0.1 | No fix stated |
| openmanage_enterprise | 4.0.1 | No fix stated |
Other CVEs of Dell OpenManage Enterprise
The 12 CVEs of Dell OpenManage Enterprise →
CVE-2024-45767
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used…
4.3
Medium
CVE-2024-45766
Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code…
8.0
High
CVE-2024-28979
Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page…
5.1
Medium
CVE-2024-28978
Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability
5.2
Medium