Lucene search

K
nvd[email protected]NVD:CVE-2022-34452
HistoryFeb 10, 2023 - 10:15 a.m.

CVE-2022-34452

2023-02-1010:15:10
CWE-668
CWE-598
web.nvd.nist.gov
4
powerpath management appliance
sensitive information disclosure
vulnerability
authenticated admin user
logs

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

0.001

Percentile

23.5%

PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view sensitive information stored in the logs.

Affected configurations

Nvd
Node
dellpowerpath_management_applianceRange3.03.4
VendorProductVersionCPE
dellpowerpath_management_appliance*cpe:2.3:a:dell:powerpath_management_appliance:*:*:*:*:*:*:*:*

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

0.001

Percentile

23.5%

Related for NVD:CVE-2022-34452