Dell EMC CloudLink 信息泄露漏洞

Dell EMC CloudLink is a flexible data encryption and key management solution from Dell, Inc. for data encryption in public, private, and hybrid cloud environments. A security vulnerability exists in Dell EMC CloudLink version 7.1.3 and prior versions. An attacker exploited the vulnerability to...

Openstack cinder Improper handling of ScaleIO backend credentials

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...

DELL EMC NetWorker 信任管理问题漏洞

DELL EMC NetWorker is a suite of unified backup and recovery software from Dell DELL USA. The software provides backup and recovery, deduplication elimination, backup reporting, and other features. A security vulnerability exists in Dell EMC NetWorker that originates from acting as a...

Dell EMC iDRAC8 Denial of Service Vulnerability

The Dell EMC iDRAC8 is a remote control card. A denial of service vulnerability exists in Dell EMC iDRAC8. An unauthenticated, remote attacker could exploit this vulnerability to cause a resource exhaustion, resulting in a denial of service condition...

Dell EMC Password Storage Vulnerability

Dell EMC is a repository manager. A plain text password storage vulnerability exists in Dell EMC. A local attacker could exploit this vulnerability to cause the disclosure of certain user credentials. An attacker could use this vulnerability to be able to use publicly available credentials to...

CVE-2022-29082

Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote...

CVE-2022-24424

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...

CVE-2022-24424

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

Path traversal

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...

Design/Logic Flaw

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-26856

Dell EMC Repository Manager (version 3.4.0) contains a plain-text password storage vulnerability. A local attacker could disclose credentials and use them to access the vulnerable application's database with privileges of the compromised account. The available documents do not specify exploit cod...

CVE-2022-24424

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...

CVE-2022-24424

Dell EMC AppSync v3.9–v4.3 contains a path traversal vulnerability in the AppSync server. A remote unauthenticated attacker may exploit this to gain unauthorized read access to files on the server filesystem with the privileges of the running web application. This is the core impact documented by...

Dell OpenManage Enterprise elevation of privilege vulnerability (CNVD-2022-42737)

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software enables cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An elevation of privilege vulnerability...

PT-2022-16687

Name of the Vulnerable Software and Affected Versions Dell EMC AppSync versions 3.9 through 4.3 Description The issue allows a remote unauthenticated attacker to potentially gain unauthorized read access to files stored on the server filesystem with the privileges of the running web application,...

PT-2022-18105

Name of the Vulnerable Software and Affected Versions Dell EMC Repository Manager version 3.4.0 Description The issue concerns a plain-text password storage vulnerability. A local attacker could exploit this, potentially leading to the disclosure of certain user credentials. The exposed credentia...

CVE-2022-24424: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...

CVE-2022-26856: Insufficiently Protected Credentials

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...