CVE-2024-22433: Critical severity Dell Data Protection Search vulnerability
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.getldapinfo in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity, Protection, and remote takeover of the system. This is a high-severity vulnerability as it allows an attacker to take complete control of DP Search to affect downstream protected devices.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22433?
CVE-2024-22433 has a high severity level due to exposed passwords in plain text.
How do I fix CVE-2024-22433?
To fix CVE-2024-22433, update Dell Data Protection Search to version 19.6.4 or later.
What software versions are affected by CVE-2024-22433?
CVE-2024-22433 affects Dell Data Protection Search versions between 19.2.0 and 19.6.4.
What type of attack can exploit CVE-2024-22433?
CVE-2024-22433 can be exploited by a remote unauthorized unauthenticated attacker.
What are the potential impacts of CVE-2024-22433?
The potential impacts of CVE-2024-22433 include loss of confidentiality, integrity, and protection of data.