CVE-2023-28045

MediumCVSS 6.3

Published: 19/05/2023(UTC)Updated: 07/08/2026(UTC)Translated: 07/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit it, leading to unauthorized data access.

Risk Assessment

Exposure of sensitive data could lead to confidentiality breaches, with serious legal and business consequences.

Recommendation

Update Dell CloudIQ Collector to the latest version. Restrict user privileges and monitor data access.

Original NVD description (English source)

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.