critical9.8
CVE-2022-34372
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability.
Impact
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Cyber Recovery | before 19.11.0.2 |