Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerability to view and modify sensitive information in the database of the affected application.
Weakness
The product stores sensitive information in cleartext in an executable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Supportassist_for_business_pcs | Dell | * | 3.2.0 (including) |
| Supportassist_for_home_pcs | Dell | * | 3.11.4 (including) |