high7.6
CVE-2022-34453
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability.
Impact
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Xtremio X2 Firmware | before 6.4.1-11 |