Improper Access Control Vulnerability in Dell Repository Manager
CVE-2023-44292

6.7MEDIUM

Key Information:

Vendor

Dell
Status
Dell Repository Manager (drm)
Vendor
CVE Published:
16 November 2023

What is CVE-2023-44292?

Dell Repository Manager versions 3.4.3 and earlier are susceptible to an improper access control vulnerability within its installation module. This flaw allows a local attacker with low privileges the potential to exploit the system, which could lead to unauthorized privilege escalation. Users are advised to review and update their systems in accordance with Dell's security guidance to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Dell Repository Manager (DRM) Versions prior to 3.4.4

References

https://www.dell.com/support/kbdoc/en-us/000219303/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.