PT-2023-14605 · Dell Emc · Dell Emc Data Protection Central

Published 2023-02-01 · Updated 2023-02-08 · CVE-2022-45102

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.1 through 19.7

Description The issue allows a remote unauthenticated attacker to potentially exploit it by injecting arbitrary Host header values, which could lead to web cache poisoning or trigger redirections.

Recommendations For versions 19.1 through 19.7, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-644

CWE-116

Related Identifiers

CVE-2022-45102

Affected Products

Dell Emc Data Protection Central

References · 4

• https://dell.com/support/kbdoc/en-us/000206329/dsa-2022-348-dell-emc-data-protection-central-security-update-for-proprietary-code-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45102 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45102 · Vendor Advisory
• https://t.me/cibsecurity/57271 · Telegram Post