CVE-2022-34392

SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security_alert@emc.com

Published

2023-02-11

Last modified

2025-03-26

Weaknesses

CWE-613

Affected products

• Supportassist (Dell)
• Supportassist For Home Pcs (Dell)

References

• https://www.dell.com/support/kbdoc/000204114