PT-2023-13412 · Dell · Powerpath Management Appliance

Published 2023-02-10 · Updated 2023-02-17 · CVE-2022-34452

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PowerPath Management Appliance versions 3.0 through 3.3

Description The issue allows an authenticated admin user to exploit and view sensitive information stored in the logs. This is a sensitive information disclosure issue.

Recommendations For PowerPath Management Appliance versions 3.0 through 3.3, consider restricting access to the logs to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-598

CWE-668

Related Identifiers

CVE-2022-34452

Affected Products

Powerpath Management Appliance

References · 4

• https://dell.com/support/kbdoc/en-us/000205404/dsa-2022-283-powerpath-management-appliance-security-update-for-multiple-security-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34452 · Security Note
• https://t.me/cibsecurity/57900 · Telegram Post