Lucene search

DellCVE-2022-34451

HistoryFeb 11, 2023 - 1:23 a.m.

CVE-2022-34451

2023-02-1101:23:25

CWE-79

dell

web.nvd.nist.gov

cve-2022-34451

powerpath management appliance

stored xss

vulnerability

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

23.5%

JSON

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to the server.

Affected configurations

Nvd

Vulners

Node

dellpowerpath_management_applianceMatch3.0

dellpowerpath_management_applianceMatch3.1

dellpowerpath_management_applianceMatch3.2

dellpowerpath_management_applianceMatch3.3

VendorProductVersionCPE
dellpowerpath_management_appliance3.0cpe:2.3:a:dell:powerpath_management_appliance:3.0:*:*:*:*:*:*:*
dellpowerpath_management_appliance3.1cpe:2.3:a:dell:powerpath_management_appliance:3.1:*:*:*:*:*:*:*
dellpowerpath_management_appliance3.2cpe:2.3:a:dell:powerpath_management_appliance:3.2:*:*:*:*:*:*:*
dellpowerpath_management_appliance3.3cpe:2.3:a:dell:powerpath_management_appliance:3.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	powerpath_management_appliance	3.0	cpe:2.3:a:dell:powerpath_management_appliance:3.0:::::::*
dell	powerpath_management_appliance	3.1	cpe:2.3:a:dell:powerpath_management_appliance:3.1:::::::*
dell	powerpath_management_appliance	3.2	cpe:2.3:a:dell:powerpath_management_appliance:3.2:::::::*
dell	powerpath_management_appliance	3.3	cpe:2.3:a:dell:powerpath_management_appliance:3.3:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerPath Management Appliance",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "3.3, 3.2*, 3.1, 3.0*"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000205404