Product:
AppSync
Summary
Dell AppSync contains a UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering. This issue poses a significant risk due to its potential impact on data integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-22767 |
Exploitation
To exploit this vulnerability, an attacker with local access can create a symbolic link that points to a sensitive file. By manipulating the application to follow this symlink, the attacker can gain unauthorized access to the file, potentially leading to information tampering or disclosure.
Affected Products
- AppSync 4.6.0: Contains the Symlink Following vulnerability that allows local attackers to tamper with information.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of Dell AppSync that addresses this issue. Additionally, restricting local access to the application can help reduce the risk of exploitation.