Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-43857
HistoryMay 31, 2023 - 12:00 a.m.

Dell PowerPath Management Appliance Authorization Issues Vulnerability

2023-05-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
dell
powerpath
management
appliance
authorization
vulnerability
versions 7.0
7.1
7.2
improper management
file permissions
folder permissions
elevate privileges
arbitrary code

EPSS

0

Percentile

5.1%

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. An authorization issue vulnerability exists in Dell PowerPath Management Appliance versions 7.0, 7.1, and 7.2, which stems from improper management of file and folder permissions. An attacker could exploit the vulnerability to elevate privileges and execute arbitrary code.

EPSS

0

Percentile

5.1%

Related for CNVD-2023-43857