CVE-2023-48660 HIGH

CVE-2023-48660

Vendor Dell

Product vApp Manger

Weakness CWE-22 · Path traversal

Published December 14, 2023

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system.

Key dates

02Disclosure timeline

December 14, 2023 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-48660 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-25732 NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write CVE-2022-46154 Arbitrary file access in KodExplorer CVE-2023-38708 Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction CVE-2026-8274 npitre cramfs-tools Directory cramfsck.c do_directory path traversal CVE-2026-42885 Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence