Dell Repository Manager Improper Privilege Management Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in Dell Repository Manager (DRM) versions 3.4.7 and 3.4.8, related to improper handling of permissions. This vulnerability allows a low-privileged attacker with local access to exploit the issue, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain elevated privileges on the system.

Remediation

Users can upgrade to Dell Repository Manager version 3.4.9 to address this vulnerability. For those already using version 3.4.9, no action is required. Additionally, ensure there is no symbolic link to the DRM working directory and its sub-directories.