Dell Repository Manager Vulnerability Allows Path Traversal Attacks
CVE-2024-28977
5.5MEDIUM
Summary
Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem with the privileges of the running web application.
Affected Version(s)
Dell Repository Manager (DRM) 3.4.2 <= 3.4.4
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dell would like to thank Jakub Brzozowski (redfr0g) for reporting this issue.