Incorrect Permission Assignment Vulnerability in Dell EMC XtremIO XMS

CVE-2019-18577

What is CVE-2019-18577?

Dell EMC XtremIO XMS prior to version 6.3.0 is affected by a vulnerability that allows a malicious local user with specific installation privileges to improperly exploit permission settings and gain unauthorized root access. This security oversight poses a significant risk, as it enables unprivileged users to execute commands with elevated rights, potentially compromising the integrity and security of the system.

References