CVE-2022-34366
10.02.2023, 20:15
Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | supportassist_for_home_pcs | 𝑥 ≤ 3.11.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-942 - Permissive Cross-domain Policy with Untrusted DomainsThe software uses a cross-domain policy file that includes domains that should not be trusted.
- CWE-697 - Incorrect ComparisonThe software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.