CVE-2022-34458 (alienware_update, command_update, update)

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data.

command confidential control cve data dell disclosure download exploit exposure information local malicious sphere system update vulnerability