CVE Vulnerabilities

CVE-2022-34397

Published: Feb 13, 2023 | Modified: Jul 21, 2023
CVSS 3.x
5.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

Affected Software

Name Vendor Start Version End Version
Evasa_provider_virtual_appliance Dell * 9.2.4.15 (excluding)
Solutions_enabler_virtual_appliance Dell * 9.2.3.6 (excluding)
Solutions_enabler_virtual_appliance Dell * 9.2.4.26 (excluding)
Unisphere_for_powermax_virtual_appliance Dell * 9.2.3.22 (excluding)
Unisphere_for_powermax_virtual_appliance Dell * 9.2.4.26 (excluding)

References