Lucene search

DellCVE-2022-34452

HistoryFeb 10, 2023 - 10:15 a.m.

CVE-2022-34452

2023-02-1010:15:10

CWE-598

CWE-668

dell

web.nvd.nist.gov

cve-2022-34452

powerpath management appliance

sensitive information disclosure

vulnerability

authenticated

admin user

logs

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.5

Confidence

High

EPSS

0.001

Percentile

23.5%

JSON

PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view sensitive information stored in the logs.

Affected configurations

Nvd

Vulners

Node

dellpowerpath_management_applianceRange3.0–3.4

VendorProductVersionCPE
dellpowerpath_management_appliance*cpe:2.3:a:dell:powerpath_management_appliance:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	powerpath_management_appliance	*	cpe:2.3:a:dell:powerpath_management_appliance::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerPath Management Appliance",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "3.3, 3.2*, 3.1, 3.0*",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000205404/dsa-2022-283-powerpath-management-appliance-security-update-for-multiple-security-vulnerabilities

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.5

Confidence

High

EPSS

0.001

Percentile

23.5%

JSON

Related for CVE-2022-34452