PT-2023-13378 · Dell · Vasa Provider Vapp+2

Mateusz Dabrowski · Published 2023-02-13 · Updated 2023-07-21 · CVE-2022-34397

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp versions 10.0.0.5 and below

Description The issue allows users to perform actions for which they are not authorized due to an authorization bypass.

Recommendations For versions 10.0.0.5 and below, update to a version above 10.0.0.5 to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-34397

Affected Products

Dell Unisphere For Powermax Vapp

Solution Enabler Vapp

Vasa Provider Vapp

References · 6

• https://osv.dev/vulnerability/CVE-2022-34397 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34397 · Security Note
• https://t.me/cvenotify/51450 · Telegram Post
• https://t.me/cvenotify/44220 · Telegram Post
• https://t.me/cvenotify/44889 · Telegram Post