CVE-2024-28961

Medium

Description

Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevated privileges. This could lead to further attacks, thus Dell recommends customers to upgrade at the earliest opportunity.

SeverityMedium
CVSS6.3
Exploit probability—
ProductDell Openmanage Enterprise
PublishedApr 29, 2024
First seenApr 29, 2024
Weakness typeCWE-256CWE-256

How to fix

Affected products

ProductAffected versionsFixed in
dell openmanage_enterprise4.0, 4.0.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.