PatchTheCVECVE-2024-22432: Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during b
CVE-2024-22432 is a high-severity flaw (CVSS 7.8) affecting networker. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configured MySQL Database user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application Database with privileges
Why this priority
- High severity
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-22432?
networker: upgrade to newer than 19.9. Exact commands for each OS are on this page.
Is CVE-2024-22432 being exploited?
CVE-2024-22432 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-22432 affect?
CVE-2024-22432 affects networker. Severity is high (CVSS 7.8). Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit
How urgent is CVE-2024-22432?
Priority 28/100. High severity
Software pages
MySQL vulnerabilities · Dell vulnerabilities
Related CVEs
- CVE-2025-36582 MEDIUM 4.8 UPGRADE Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation
- CVE-2025-21107 HIGH 7.8 UPGRADE Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted S
- CVE-2025-21104 MEDIUM 4.3 UPGRADE Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site (
- CVE-2025-21103 HIGH 7.8 UPGRADE Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s)
- CVE-2024-42422 HIGH 8.3 UPGRADE Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability