CVE-2024-52542

Description

Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering.

Reserved 2024-11-12 | Published 2024-12-17 | Updated 2024-12-17 | Assigner dell

Problem types

CWE-61: UNIX Symbolic Link (Symlink) Following

Product status

Default status
unaffected

4.6.0.x
affected

Credits

Dell Technologies would like to thank Ouallaout Noureddine for reporting this issue. finder

References

www.dell.com/...rity-update-for-dell-appsync-vulnerabilities vendor-advisory

cve.org (CVE-2024-52542)

nvd.nist.gov (CVE-2024-52542)

Download JSON