Product:
AppSync
Summary
Dell AppSync contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. This could allow unauthorized access to critical resources within the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-22768 |
Exploitation
To exploit this vulnerability, an attacker with local access would need to leverage their low privileges to gain elevated access to critical resources. This could involve manipulating permissions or exploiting the incorrect assignment to perform unauthorized actions within the system.
Affected Products
- Dell AppSync: Version 4.6.0 is affected by a vulnerability that allows low privileged attackers to elevate their privileges.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Regularly reviewing and updating permissions for critical resources can also help prevent unauthorized access.