Lucene search
HistoryFeb 11, 2023 - 1:23 a.m.
CVE-2022-34449
cve-2022-34449
powerpath management appliance
cryptographic keys
vulnerability
admin users
sensitive information
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
AI Score
5.8
Confidence
High
EPSS
0
Percentile
13.2%
PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenticated admin users can exploit the issue that leads to view and modifying sensitive information stored in the application.
Affected configurations
Node
dellpowerpath_management_applianceMatch3.2
ORdellpowerpath_management_applianceMatch3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | powerpath_management_appliance | 3.2 | cpe:2.3:a:dell:powerpath_management_appliance:3.2:*:*:*:*:*:*:* |
| dell | powerpath_management_appliance | 3.3 | cpe:2.3:a:dell:powerpath_management_appliance:3.3:*:*:*:*:*:*:* |
References
Related
prion
prion
Hardcoded credentials
2023-02-11 01:23:00
cvelist
cvelist
CVE-2022-34449
2023-02-10 20:53:57
cve
cve
CVE-2022-34449
2023-02-11 01:23:25
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
AI Score
5.8
Confidence
High
EPSS
0
Percentile
13.2%
Related for NVD:CVE-2022-34449