CVE-2024-25957
Last modified
CVE-2024-25957 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Grab | < 5.0.5 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-25957?
How severe is CVE-2024-25957?
How do I fix CVE-2024-25957?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-25951A command injection vulnerability exists in local RACADM. A …8
- CVE-2024-25952Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x conta…6
- CVE-2024-25953Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x conta…6
- CVE-2024-25954Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, con…7.5
- CVE-2024-25955Dell vApp Manager, versions prior to 9.2.4.9 contain a Comma…8.8
- CVE-2024-25956Dell Grab for Windows, versions 5.0.4 and below, contains an…5.5
- CVE-2024-25958Dell Grab for Windows, versions up to and including 5.0.4, c…7.8
- CVE-2024-25959Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x conta…5.5
- CVE-2024-2596Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
- CVE-2024-25960Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x conta…7.8
- CVE-2024-25961Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x conta…6.7
- CVE-2024-25962Dell InsightIQ, version 5.0, contains an improper access con…6.5
Are you affected by CVE-2024-25957?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST