CVE Vulnerabilities

CVE-2023-32448

Cleartext Storage of Sensitive Information

Published: May 30, 2023 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems.

Weakness

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Affected Software

Name Vendor Start Version End Version
Powerpath Dell 7.0 (including) 7.0 (including)
Powerpath Dell 7.1 (including) 7.1 (including)
Powerpath Dell 7.2 (including) 7.2 (including)

Potential Mitigations

References