CVE-2024-22433: Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote…

PriorityP260critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.64%

46.2th percentile

Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity, Protection, and remote takeover of the system. This is a high-severity vulnerability as it allows an attacker to take complete control of DP Search to affect downstream protected devices.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	—	—
dell	data_protection_search	>= 19.2.0 < 19.6.4	19.6.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.