7.3
Élevée
CVE-2022-34457 Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default…
Description
Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and able to make application unavailable for all users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell Command Configure (DCC) 4.8 | premières → 4.8 | Pas de correctif indiqué |
Autres CVE de Dell Command Configure (DCC)
Les 4 CVE de Dell Command Configure (DCC) →
CVE-2023-44289
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability
7.3
Élevée
CVE-2023-43086
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability
7.3
Élevée
CVE-2019-18575
Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability
7.1
Élevée