We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access.
Reserved 2024-09-25 | Published 2024-12-18 | Updated 2024-12-18 | Assigner dellCWE-61: UNIX Symbolic Link (Symlink) Following
Dell Technologies would like to thank mdanilor for reporting this issue.
www.dell.com/support/kbdoc/en-us/000255700/dsa-2024-475
Support options
