CVEvulnerability

CVE-2023-39250

5.5 MEDIUM Published 2023-08-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-540, CWE-668

Description

Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.

Affected configurations

• dell replay manager for vmware (< 3.1.2) • dell storage integration tools for vmware (< 6.1.1) • dell storage vsphere client plugin (< 6.1.1)

Related

Weakness · CWE (2)

  • CWE-540 Inclusion of Sensitive Information in Source Code weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness

References