CVE-2019-3750

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file. This issue occurs because of insecure handling of Temp directory permissions that were set incorrectly.

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file. This issue occurs because of insecure handling of Temp directory permissions that were set incorrectly.

Dell Command Update versiones anteriores a 3.1, contienen una Vulnerabilidad de Eliminación Arbitraria de Archivos. Un usuario malicioso autenticado local con bajos privilegios podría explotar esta vulnerabilidad para suprimir archivos arbitrarios al crear un enlace simbólico desde el archivo "Temp\IC\ICDebugLog.txt" hacia cualquier archivo apuntado. Este problema se presenta debido a un manejo no seguro de los permisos del directorio Temp que se configuraron incorrectamente.