CVE-2022-34392 — Dell / SupportAssist

CVE-2022-34392

Dell / SupportAssist PUBLISHED

Description (CNA)

SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information.

Affected (CNA)

Vendor / product	Versions
Dell / SupportAssist	affected 0 through 3.11.4

CWE

CWE-613

References

https://www.dell.com/support/kbdoc/000204114

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/000204114

CISA-ADP

No English description supplied.

No references supplied.