DSA-2024-074: Security Update for Dell EMC License Manager privilege elevation vulnerability
Summary: Dell EMC License Manager remediation is available for privilege elevation vulnerability that could be exploited by malicious users to compromise the affected system.
Bu makale şunlar için geçerlidir:
Bu makale şunlar için geçerli değildir:
Bu makale, belirli bir ürüne bağlı değildir.
Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Impact
Medium
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager, 1.7.1, contains a privilege elevation vulnerability. An authenticated non-admin attacker could potentially exploit this vulnerability, leading to arbitrary code execution. Exploitation may lead to a complete system compromise. | 6.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager, 1.7.1, contains a privilege elevation vulnerability. An authenticated non-admin attacker could potentially exploit this vulnerability, leading to arbitrary code execution. Exploitation may lead to a complete system compromise. | 6.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |
Etkilenen Ürünler ve Düzeltme
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager | Versions prior to 1.7.2 | 1.7.2 and later | Dell EMC License Manager 1.7.2 |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2024-22456 | Dell EMC License Manager | Versions prior to 1.7.2 | 1.7.2 and later | Dell EMC License Manager 1.7.2 |
The vulnerability does not exist if Dell EMC License Manager is installed in the default location recommended by the installer. (C:\Program Files (x86)\Dell\SysMgt\LicenseManager)
Geçici Çözümler ve Risk Azaltma
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-22456 | Install Dell EMC License Manager in the default location (C:\Program Files (x86)\Dell\SysMgt\LicenseManager) |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-02-08 | Initial Release |
| 2.0 | 2024-05-22 | Updated to include external link icon with no other changes to content. |
Acknowledgements
Dell would like to thank Pwni for reporting this issue.
Related Information
Yasal Uyarı
Etkilenen Ürünler
Dell License Manager (DLM)Makale Özellikleri
Article Number: 000221947
Article Type: Dell Security Advisory
Son Değiştirme: 22 May 2024
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.