33A6099

**Nome do software vulnerável e versões afetadas** Versões do Dell vApp Manager anteriores à 9.2.4.9 **Descrição** O problema está relacionado a uma vulnerabilidade de injeção de comando. Um invasor autorizado poderia explorar essa vulnerabilidade, levando à execução de um comando inserido. Isso ocorre devido à falha na neutralização de elementos especiais utilizados no comando do sistema operacional. A exploração da vulnerabilidade pode permitir que um invasor remoto execute comandos arbitrários. **Recomendações** Para versões anteriores à 9.2.4.9, atualize para a versão 9.2.4.9 ou posterior assim que possível para resolver o problema. Como solução alternativa temporária, considere restringir o acesso ao componente vulnerável para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** The issue allows a remote malicious user with high privileges to potentially exploit it and read arbitrary files from the target system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** A command injection vulnerability exists, allowing a remote malicious user with high privileges to potentially exploit this issue, leading to the execution of arbitrary OS commands on the affected system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation by a remote malicious user with high privileges.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** A command injection vulnerability exists, allowing a remote malicious user with high privileges to potentially exploit this issue, leading to the execution of arbitrary OS commands on the affected system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation by a remote malicious user with high privileges.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manger versions prior to 9.2.4.x **Description** The issue allows a remote attacker to potentially exploit an arbitrary file read vulnerability, enabling them to read arbitrary files from the target system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** A command injection vulnerability exists, allowing a remote malicious user with high privileges to potentially exploit this issue, leading to the execution of arbitrary OS commands on the affected system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation by a remote malicious user with high privileges.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** A remote attacker could potentially exploit this issue to obtain sensitive information, which may aid in further attacks. This is an information disclosure vulnerability. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Dell vApp Manager versions prior to 9.2.4.x **Description** A command injection vulnerability exists, allowing a remote malicious user with high privileges to potentially exploit this issue and execute arbitrary OS commands on the affected system. **Recommendations** For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation by a remote malicious user with high privileges.