DSA-2024-074: Security Update for Dell EMC License Manager privilege elevation vulnerability
Sammendrag: Dell EMC License Manager remediation is available for privilege elevation vulnerability that could be exploited by malicious users to compromise the affected system.
Denne artikkelen gjelder for
Denne artikkelen gjelder ikke for
Denne artikkelen er ikke knyttet til noe bestemt produkt.
Det er ikke produktversjonene som identifiseres i denne artikkelen.
Påvirkning
Medium
Detaljer
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager, 1.7.1, contains a privilege elevation vulnerability. An authenticated non-admin attacker could potentially exploit this vulnerability, leading to arbitrary code execution. Exploitation may lead to a complete system compromise. | 6.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager, 1.7.1, contains a privilege elevation vulnerability. An authenticated non-admin attacker could potentially exploit this vulnerability, leading to arbitrary code execution. Exploitation may lead to a complete system compromise. | 6.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |
Berørte produkter og utbedring
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager | Versions prior to 1.7.2 | 1.7.2 and later | Dell EMC License Manager 1.7.2 |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager | Versions prior to 1.7.2 | 1.7.2 and later | Dell EMC License Manager 1.7.2 |
The vulnerability does not exist if Dell EMC License Manager is installed in the default location recommended by the installer. (C:\Program Files (x86)\Dell\SysMgt\LicenseManager)
Endelige og midlertidige løsninger
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-22456 | Install Dell EMC License Manager in the default location (C:\Program Files (x86)\Dell\SysMgt\LicenseManager) |
Endringshistorikk
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-02-08 | Initial Release |
| 2.0 | 2024-05-22 | Updated to include external link icon with no other changes to content. |
Bekreftelser
Dell would like to thank Pwni for reporting this issue.
Relatert informasjon
Juridisk ansvarsfraskrivelse
Berørte produkter
Dell License Manager (DLM)Artikkelegenskaper
Artikkelnummer: 000221947
Artikkeltype: Dell Security Advisory
Sist endret: 22 mai 2024
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.