Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-25957 EUVD-2024-23259GHSA-hmhr-xf6m-r87c

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module.…

Published Mar 26, 2024 · Updated Aug 2, 2024 · Assigned by dell

Description

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

Affected products

VendorProductAffectedFixed
Dell Grab for Windows N/A – < 5.0.5 5.0.5

References