CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read‑only user could potentially exploit it to add or delete QoS policies (which are disabled by default). Affected component: QoS policy management in Dell XtremIO XMS. Root cause: improper ...