CVE-2023-48660: Path Traversal
Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48660?
CVE-2023-48660 is considered a high severity vulnerability due to the potential for arbitrary file reading by remote attackers.
How do I fix CVE-2023-48660?
To mitigate CVE-2023-48660, upgrade your Dell vApp Manager, Dell Unisphere for Powermax, and Dell Powermax OS to their latest versions above the specified thresholds.
What versions are affected by CVE-2023-48660?
CVE-2023-48660 affects Dell vApp Manager versions prior to 9.2.4.x, Dell Unisphere for Powermax versions prior to 9.2.4.7, and Dell Powermax OS version 5978.
What could an attacker do if they exploit CVE-2023-48660?
If exploited, an attacker could read arbitrary files on the target system, potentially leading to the exposure of sensitive information.
Is exploitation of CVE-2023-48660 network-based?
Yes, exploitation of CVE-2023-48660 can be performed remotely over the network.