Dell AppSync Incorrect Permission Assignment Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in Dell AppSync version 4.6.0, related to incorrect permission assignments for critical resources. This flaw allows a low-privileged attacker with local access to potentially exploit the vulnerability, leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to gain higher-level permissions or rights within the application or system.

Remediation

Users can upgrade to Dell AppSync version 4.6.1.0 or later to address this vulnerability. The update is available through the Dell Support website.