Authorization

2023-02-1310:15:00

PRIOn knowledge base

www.prio-n.com

dell

powermax

authorization

bypass vulnerability

nvd

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

CPENameOperatorVersion
evasa_provider_virtual_appliancelt9.2.4.15
solutions_enabler_virtual_appliancelt9.2.4.26
solutions_enabler_virtual_appliancelt9.2.3.6
unisphere_for_powermax_virtual_appliancelt9.2.4.26
unisphere_for_powermax_virtual_appliancelt9.2.3.22

Name	Operator	Version
evasa_provider_virtual_appliance	lt	9.2.4.15
solutions_enabler_virtual_appliance	lt	9.2.4.26
solutions_enabler_virtual_appliance	lt	9.2.3.6
unisphere_for_powermax_virtual_appliance	lt	9.2.4.26
unisphere_for_powermax_virtual_appliance	lt	9.2.3.22

References

www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities