Insecure File Permissions in Dell NativeEdge

CVE-2024-52543

Summary

Dell NativeEdge, specifically version 2.1.0.0, has a vulnerability that allows the creation of temporary files with insecure permissions. This flaw can be exploited by a high privileged user who has local access to the system, leading to a potential information disclosure. If not addressed, this vulnerability could allow unauthorized access to sensitive data and compromise the integrity of the affected system. It is crucial for organizations using this software to be aware of this issue and apply the necessary security updates as outlined in the vendor's advisory.

References