CVE-2019-18575 - CERT CVE
ID CVE-2019-18575
Sažetak Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticated malicious user could exploit this vulnerability by creating a symlink to a target file, allowing the attacker to overwrite or corrupt a specified file on the system.
Reference
CVSS
Base: 6.6
Impact: 9.2
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE COMPLETE COMPLETE
CVSS vektor AV:L/AC:L/Au:N/C:N/I:C/A:C
Zadnje važnije ažuriranje 16-10-2020 - 13:33
Objavljeno 06-12-2019 - 21:15