Zip Slip Vulnerability in Dell Hybrid Client by Dell
CVE-2022-34429

6.5MEDIUM

Key Information:

Vendor
Dell
Status
Dell Hybrid Client (dhc)
Vendor
CVE Published:
30 September 2022

Summary

Dell Hybrid Client versions prior to 1.8 are susceptible to a Zip Slip vulnerability that allows attackers with guest privileges to manipulate system files. This flaw poses a significant risk as it could lead to unauthorized changes in system configurations and data integrity. It is essential for users to apply the latest updates to mitigate this threat.

Affected Version(s)

Dell Hybrid Client (DHC) < 1.8

References

https://www.dell.com/support/kbdoc/en-us/000203345/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.