{"id":"CVE-2023-28045","title":"\nDell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability","summary":"\nDell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-311"],"vendor":"dell","product":"aiops_collector","affected":["aiops_collector >= 1.10.2, < 1.10.17"],"patched":["aiops_collector 1.10.17"],"published":"2023-05-19","updated":"2026-08-07","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-28045","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000213696/dsa-2023-165-dell-cloudiq-collector-security-update-for-missing-encryption-of-sensitive-data-vulnerability","label":"security_alert@emc.com"},{"url":"https://www.dell.com/support/kbdoc/en-us/000213696/dsa-2023-165-dell-cloudiq-collector-security-update-for-missing-encryption-of-sensitive-data-vulnerability","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00179,"epssPercentile":0.07704,"ingestedAt":"2026-08-07T14:14:16.142Z","slug":"CVE-2023-28045","body":"## Overview\n\n\nDell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data.\n\n## Affected\n\n- `aiops_collector >= 1.10.2, < 1.10.17`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `aiops_collector 1.10.17`","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}