DSA-2024-134: Security Update for Dell InsightIQ for Proprietary Code Vulnerability
Résumé: Dell InsightIQ remediation is available for improper access control vulnerability which could be exploited by malicious users to compromise the affected system.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
High
Détails
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25962 | Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data. | 8.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H  |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-25962 | Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data. | 8.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H |
Produits concernés et mesure corrective
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| InsightIQ | Version 5.0.0 | Version 5.0.1 | 5.0.1 patch download |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| InsightIQ | Version 5.0.0 | Version 5.0.1 | 5.0.1 patch download |
Historique des révisions
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-03-27 | Initial Release |
Informations connexes
Mention légale
Produits concernés
PowerScale InsightIQPropriétés de l’article
Numéro d’article: 000223551
Type d’article: Dell Security Advisory
Dernière modification: 19 Sep 2025
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.