Dell ImageAssist CVE-2019-3767 Local Information Disclosure Vulnerability

Description

Dell ImageAssist is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Versions prior to Dell ImageAssist 8.7.1.5 are vulnerable.

Technologies Affected

• Dell ImageAssist 4.0.0.9
• Dell ImageAssist 5.0.1.1
• Dell ImageAssist 6.0.0.8
• Dell ImageAssist 7.0.1.2
• Dell ImageAssist 7.1.0.6
• Dell ImageAssist 8.7.1.4

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Ensure that only trusted users have local, interactive access to affected computers.

Updates are available. Please see the references or vendor advisory for more information.