EUVD-2021-22934

Malware in sbrugna...

EUVD-2021-22952

Malware in sbrugna...

EUVD-2021-22933

Malware in sbrugna...

EUVD-2021-22953

Malware in sbrugna...

EUVD-2021-22932

Malware in sbrugna...

EUVD-2021-22955

Malware in sbrugna...

Dell EMC CloudLink Authentication Bypass

The vulnerability of the Dell EMC CloudLink software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-34379: Improper Authentication

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

PT-2022-4923 · Dell Emc · Dell Emc Cloudlink

Name of the Vulnerable Software and Affected Versions: Dell EMC CloudLink versions prior to 7.1.2 Description: The issue is related to weaknesses in the authentication procedure, allowing a remote attacker with knowledge of active directory usernames to potentially gain unauthorized access to the...

CVE-2022-24414

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attac...

CVE-2022-24414

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attac...

Dell EMC CloudLink 信息泄露漏洞

Dell EMC CloudLink is a flexible data encryption and key management solution from Dell, Inc. for data encryption in public, private, and hybrid cloud environments. A security vulnerability exists in Dell EMC CloudLink version 7.1.3 and prior versions. An attacker exploited the vulnerability to...

CVE-2022-24414: Use of GET Request Method With Sensitive Query Strings

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attac...

PT-2022-16682

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions 7.1.3 and earlier Description The issue concerns the exposure of Auth Tokens in GET requests, which can be logged in reverse proxies and server logs. Attackers may potentially use these tokens to access the CloudLin...

CVE-2022-24414

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attac...

Dell EMC CloudLink Input Validation Error Vulnerability (CNVD-2021-92445)

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to an input validation error that can be exploited by remote, low-privilege attackers to...

Dell EMC CloudLink CSV Formula Injection Vulnerability

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.A CSV formula injection vulnerability exists in Dell EMC CloudLink 7.1 and earlier versions, which can be exploited by remote, high-privilege attacker...

Dell EMC CloudLink Buffer Overflow Vulnerability

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to a buffer overflow vulnerability that could be exploited by a local, low-privilege attack...

Dell EMC CloudLink Arbitrary File Creation Vulnerability

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions contain an arbitrary file creation vulnerability that can be exploited by remote unauthenticated attackers...