PT-2023-23811 · Dell · Dell Hybrid Client

CVE-2023-32476

·

Publicado

2023-07-20

·

Atualizado

2023-07-31

CVSS v3.1

6.4

Média

VetorAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell Hybrid Client version 2.0
Description The issue allows an unauthenticated malicious user on the device to access hard-coded secrets in javascript files, resulting in sensitive data exposure.
Recommendations For Dell Hybrid Client version 2.0, consider restricting access to the javascript files containing hard-coded secrets until a patch is available. As a temporary workaround, review the application's configuration to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-32476

Produtos afetados

Dell Hybrid Client