CVE-2023-32458

Name of the Vulnerable Software and Affected Versions Dell AppSync versions 4.4.0.0 through 4.6.0.0

Description The issue is related to an improper access control vulnerability in the Embedded Service Enabler component. A local malicious user could potentially exploit this vulnerability during installation, leading to a privilege escalation.

Recommendations For Dell AppSync versions 4.4.0.0 through 4.6.0.0, consider updating to a version outside of the affected range to resolve the issue. As a temporary workaround, restrict access to the Embedded Service Enabler component to minimize the risk of exploitation.