First published: Fri Feb 10 2023(Updated: )
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerability to view and modify sensitive information in the database of the affected application.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell SupportAssist for Business PCs | <=3.2.0 | |
Dell SupportAssist for Home PCs | <=3.11.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-34388 is high.
CVE-2022-34388 allows a local malicious user with low privileges to view and modify sensitive information in the database.
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) are affected by CVE-2022-34388.
A local malicious user with low privileges can exploit CVE-2022-34388 to access and modify sensitive information in the database of Dell SupportAssist.
You can find more information about CVE-2022-34388 on the Dell support website.