CVE-2023-28045

CVSS V2 None CVSS V3 None
Description
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.
Overview
  • CVE ID
  • CVE-2023-28045
  • Assigner
  • security_alert@emc.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-19T09:15:09
  • Last Modified Date
  • 2023-05-19T09:15:09
Weakness Enumerations
CWE URL
CWE-311 http://cwe.mitre.org/data/definitions/311.html
References
Reference URL Reference Tags
https://www.dell.com/support/kbdoc/en-us/000213696/dsa-2023-165-dell-cloudiq-collector-security-update-for-missing-encryption-of-sensitive-data-vulnerability
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28045
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28045
History
Created Old Value New Value Data Type Notes
2023-05-19 10:00:35 Added to TrackCVE
2023-05-19 10:00:35 Weakness Enumeration new