CVE-2023-32468 MEDIUM

CVE-2023-32468

Vendor Dell
Product ECS Streamer
Weakness CWE-532 · Sensitive info in logs
Published July 26, 2023
Last update October 21, 2024

CVSS base score

5.8/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Dell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in log files vulnerability. A remote malicious high-privileged user could potentially exploit this vulnerability leading to exposure of this sensitive data.

Key dates

02Disclosure timeline

July 26, 2023 CVE published
October 21, 2024 Record updated