PT-2023-13378 · Dell · Vasa Provider Vapp+2

Mateusz Dabrowski · Publicado 2023-02-13 · Atualizado 2023-07-21 · CVE-2022-34397

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Média

Vetor base

AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp versions 10.0.0.5 and below

Description The issue allows users to perform actions for which they are not authorized due to an authorization bypass.

Recommendations For versions 10.0.0.5 and below, update to a version above 10.0.0.5 to resolve the issue.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2022-34397

Produtos afetados

Dell Unisphere For Powermax Vapp

Solution Enabler Vapp

Vasa Provider Vapp

Referências · 6

• https://t.me/cvenotify/51450 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-34397 · Aviso do Fabricante
• https://dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities · Aviso do Fabricante
• https://t.me/cvenotify/44220 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-34397 · Nota de Segurança
• https://t.me/cvenotify/44889 · Publicação no Telegram