PT-2023-30883 · Dell · Dell Vapp Manager

33A6099 · CVE-2023-48661 · Published 2023-12-14 · Updated 2023-12-19

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell vApp Manager versions prior to 9.2.4.x

Description The issue allows a remote malicious user with high privileges to potentially exploit it and read arbitrary files from the target system.

Recommendations For versions prior to 9.2.4.x, update to version 9.2.4.x or later to resolve the issue.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2023-48661

Affected Products

Dell Vapp Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-48661 · Security Note
• https://dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-48661 · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1736326324665319761 · Twitter Post
• https://twitter.com/CVEnew/status/1735333631747600702 · Twitter Post
• https://t.me/cvenotify/64086 · Telegram Post