PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems.
References
Configurations
Configuration 1 (hide)
|
History
06 Jun 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CPE | cpe:2.3:a:dell:powerpath:7.2:*:*:*:*:windows:*:* cpe:2.3:a:dell:powerpath:7.1:*:*:*:*:windows:*:* cpe:2.3:a:dell:powerpath:7.0:*:*:*:*:windows:*:* |
|
References | (MISC) https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities - Patch, Vendor Advisory |
30 May 2023, 16:36
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-30 16:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-32448
Mitre link : CVE-2023-32448
CVE.ORG link : CVE-2023-32448
JSON object : View
Products Affected
dell
- powerpath
CWE
CWE-312
Cleartext Storage of Sensitive Information