Filtered by vendor Dell Subscriptions
Filtered by product Data Protection Search Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22433 1 Dell 1 Data Protection Search 2024-11-21 8.8 High
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity, Protection, and remote takeover of the system. This is a high-severity vulnerability as it allows an attacker to take complete control of DP Search to affect downstream protected devices.