Dell Command | Monitor, versions prior to 10.9, contain... · CVE-2023-28049 · GitHub Advisory Database · GitHub

Dell Command | Monitor, versions prior to 10.9, contain...

Moderate severity Unreviewed Published Feb 6, 2024 to the GitHub Advisory Database • Updated Feb 14, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete.

References

Published by the National Vulnerability Database

Feb 6, 2024

Published to the GitHub Advisory Database Feb 6, 2024

Last updated Feb 14, 2024

Severity

Moderate

4.7

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H