CVE-2024-25957 — Dell / Grab for Windows

Description (CNA)

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Dell / Grab for Windows	affected N/A before 5.0.5

CWE

CWE-532

References

https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000223508/dsa-2024-121-security-update-for-grab-for-windows-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.