Lucene search

[email protected]NVD:CVE-2022-34397

HistoryFeb 13, 2023 - 10:15 a.m.

CVE-2022-34397

2023-02-1310:15:13

CWE-863

[email protected]

web.nvd.nist.gov

dell unisphere powermax vasa provider solution enabler authorization bypass vulnerability

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.0%

JSON

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

Affected configurations

NVD

Node

dellevasa_provider_virtual_applianceRange<9.2.4.15

dellsolutions_enabler_virtual_applianceRange<9.2.3.6

dellsolutions_enabler_virtual_applianceRange<9.2.4.26eem

dellunisphere_for_powermax_virtual_applianceRange<9.2.3.22

dellunisphere_for_powermax_virtual_applianceRange<9.2.4.26eem

References

www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for NVD:CVE-2022-34397

cvelist1 prion1 cve1