5.5
Moyenne
CVE-2022-34392 SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability
Description
SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SupportAssist 3.11 | premières → 3.11.4 | Pas de correctif indiqué |
Autres CVE de SupportAssist
Les 4 CVE de SupportAssist →
CVE-2022-34389
Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component
3.7
Faible
CVE-2022-34388
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)…
7.1
Élevée
CVE-2022-34387
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)…
6.4
Moyenne