7.3
High
CVE-2022-34457 Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default…
Description
Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and able to make application unavailable for all users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Command Configure (DCC) 4.8 | earliest → 4.8 | No fix stated |
Other CVEs of Dell Command Configure (DCC)
The 4 CVEs of Dell Command Configure (DCC) →
CVE-2023-44289
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability
7.3
High
CVE-2023-43086
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability
7.3
High
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability
7.1
High