Description
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Problem types
CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
Product status
Any version before 5.5.15.0
Credits
Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
References
www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403
