CVE-2022-33918
12.10.2022, 20:15
Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive information.Enginsight
Vendor | Product | Version |
---|---|---|
dell | geodrive | 2.1.0 ≤ 𝑥 < 2.2.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-316 - Cleartext Storage of Sensitive Information in MemoryThe application stores sensitive information in cleartext in memory.
- CWE-312 - Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.