PT-2019-15528 · Dell · Dell Command Configure

Publicado 2019-12-06 · Atualizado 2020-10-16 · CVE-2019-18575

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Command Configure versions prior to 4.2.1

Description The issue allows a locally authenticated malicious user to exploit an uncontrolled search path vulnerability. This can be done by creating a symlink to a target file, enabling the attacker to overwrite or corrupt a specified file on the system.

Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to resolve the issue.

Correção

Link Following

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-59

CWE-427

Identificadores relacionados

CVE-2019-18575

Produtos afetados

Dell Command Configure

Referências · 3

• https://dell.com/support/article/SLN319715 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18575 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18575 · Nota de Segurança