CVE-2022-34372

CVE-2022-34372 affects Dell PowerProtect Cyber Recovery prior to 19.11.0.2. The root cause is an authentication bypass affecting access to the docker registry API, allowing a remote, unauthenticated attacker to interact with the API and potentially alter docker images, resulting in loss of integr...

CVE-2022-32481

Dell PowerProtect Cyber Recovery (pre-19.11) contains a local privilege-escalation vulnerability in virtual appliance deployments. A lower-privileged, authenticated user can chain docker commands to escalate to root, enabling full system takeover. Affected versions are prior to 19.11. Remediation...

CVE-2025-26335

Dell PowerProtect Cyber Recovery (versions prior to 19.18.0.2) contains an Insertion of Sensitive Information Into Sent Data vulnerability. The root cause is stated as improper handling of sensitive information, enabling a high-privilege attacker with remote access to potentially expose data. Aff...

CVE-2023-32465

Dell PowerProtect Cyber Recovery is affected by an authentication-bypass vulnerability (CVE-2023-32465). An authenticated remote attacker can gain unauthorized admin access, potentially resulting in a full system takeover. A Nessus/DSA-2023-201 advisory states affected versions are prior to 19.13...