high8.3
CVE-2022-22551
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings.
Impact
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Appsync | before 4.4.0.0 |