Insufficient Session Expiration in Storage Resource Manager - CVE-2024-47242
Published: November 7, 2024
Vulnerability identifier: #VU100042
CSH Severity: Low
CVSS v4: 1 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-47242
CWE-ID: CWE-613
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an adjacent user to gain access to sensitive information.
The vulnerability exists due to insufficient session expiration issue. An adjacent user can obtain or guess session token and gain unauthorized access to session that belongs to another user.
Affected software
Storage Resource Manager
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC Storage Monitoring and Reporting (SMR)
How to mitigate CVE-2024-47242
Install updates from vendor's website.
Storage Resource Manager - update to 5.0.2.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.2.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.2.0