Description
Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Inventory Collector Client | < 13.8.0 | 13.8.0 |
References
- https://www.dell.com/support/kbdoc/en-us/000463760/dsa-2026-215 vendor-advisory