Description
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell Power Protect Cyber Recovery
Default version status: unaffected
0 to < 20.3.0.0affected
Dell Cyber Recovery
Default version status: unaffected
0 to < osupdate-15.4.0-19.binaffected0 to < osupdate-15.6.1-1.binaffected