Lucene search
HistoryJul 21, 2022 - 4:15 a.m.
CVE-2022-34367
dell emc
data protection
cross-site request forgery
vulnerability
unauthenticated attacker
server operations
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.5%
Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery Vulnerability. A(n) remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations.
Affected configurations
Node
dellemc_data_protection_centralRange19.1–19.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | emc_data_protection_central | * | cpe:2.3:a:dell:emc_data_protection_central:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2022-07-21 04:15:00
cvelist
cvelist
CVE-2022-34367
2022-07-20 20:55:36
cve
cve
CVE-2022-34367
2022-07-21 04:15:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.5%
Related for NVD:CVE-2022-34367