CVE-2024-22433

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity, Protection, and remote takeover of the system. This is a high-severity vulnerability as it allows an attacker to take complete control of DP Search to affect downstream protected devices.

• CWE-538

• https://www.dell.com/support/kbdoc/en-us/000221720/dsa-2024-063-security-update-for-dell-data-protection-search-multiple-security-vulnerabilitiesPatch, Vendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000221720/dsa-2024-063-security-update-for-dell-data-protection-search-multiple-security-vulnerabilitiesPatch, Vendor Advisory

Published

Feb 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22426Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contai…9.8
• CVE-2024-22428 Dell iDRAC Service Module, versions 5.2.0.0 and prior, cont…7.8
• CVE-2024-22429Dell BIOS contains an Improper Input Validation vulnerabilit…6.7
• CVE-2024-2243A vulnerability was found in csmock where a regular user of …8.8
• CVE-2024-22430 Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contai…5.5
• CVE-2024-22432 Networker 19.9 and all prior versions contains a Plain-text…6.5
• CVE-2024-22435 A potential security vulnerability has been identified in W…8.3
• CVE-2024-22436A security vulnerability in HPE IceWall Agent products could…6.5
• CVE-2024-22437 A potential security vulnerability has been identified in V…7.3
• CVE-2024-22438 A potential security vulnerability has been identified in H…3.5
• CVE-2024-22439 A potential security vulnerability has been identified in H…6.9
• CVE-2024-2244REST service authentication anomaly with “valid username/no …5.3