CVE-2025-29983

Dell Trusted Device prior to version 7.0.3.0 is affected by an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged attacker with local access could potentially exploit this to achieve Elevation of Privileges. The issue is documented across multiple sources...

CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Dell Trusted Device 访问控制错误漏洞

Dell Trusted Device is an application from Dell USA. An elevation of privilege vulnerability exists in Dell Trusted Device, which stems from a misconfiguration of the default privileges and can be exploited by an attacker to elevate privileges...

PT-2025-16288 · Dell · Dell Trusted Device

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device versions prior to 7.0.3.0 Description: Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this...

Dell Trusted Device 后置链接漏洞

Dell Trusted Device is an application from Dell USA. Dell Trusted Device suffers from a backlink vulnerability that stems from improper link resolution and can be exploited by an attacker to cause an elevation of privilege...

CVE-2025-29983: Improper Link Resolution Before File Access

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-29984: Improper Access Control

Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2025-16287 · Dell · Dell Trusted Device

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device versions prior to 7.0.3.0 Description: Dell Trusted Device contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low-privileged attacker with local access could potentially exploit this...

scheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication...

GHSA-H6MP-MC7G-MG49 scheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication...

CVE-2023-25542

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

Information disclosure

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

CVE-2023-25542

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

CVE-2023-25542

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

CVE-2023-25542

Dell Trusted Device Agent prior to 5.3.0 has an improper installation permissions vulnerability that could allow an unauthenticated local attacker to gain escalated privileges. Affected product: Dell Trusted Device Agent (Windows/Linux agents referenced across sources). Root cause: incorrect inst...

PT-2023-20150 · Dell · Dell Trusted Device Agent

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device Agent versions prior to 5.3.0 Description: The issue is related to improper installation permissions, allowing an unauthenticated local attacker to potentially exploit it and gain escalated privileges. Recommendations: For...

CVE-2023-25542: Incorrect Default Permissions

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

Dell Trusted Device Agent 访问控制错误漏洞

Dell Trusted Device Agent is an agent program from Dell USA. An Access Control Error vulnerability exists in Dell Trusted Device Agent versions prior to 5.3.0, which stems from the program containing incorrect installation permissions and can be exploited by an attacker to gain elevation of...

Nextcloud 日志信息泄露漏洞

An information disclosure vulnerability exists in Nextcloud Server, an open source, powerful cloud storage network drive project. An attacker could use this vulnerability to bypass the dual authentication in Nextcloud, and an attacker who knows the password or has access to the WebAuthN trusted...