medium6.5
CVE-2022-45103
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability.
Impact
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Solutions Enabler Virtual Appliance | before 9.2.3.6 |
| Dell | Emc Unisphere For Powermax | before 9.2.3.22 from 10.0.0.0 before 10.0.0.5 |
| Dell | Emc Unisphere For Powermax Virtual Appliance | before 9.2.3.22 |
| Dell | Emc Vasa Provider Virtual Appliance | before 9.2.4.15 |
| Dell | Solutions Enabler | before 9.2.3.6 from 10.0.0.0 before 10.0.0.5 |
| Dell | Unisphere 360 | before 9.2.3.12 |
| Dell | Vasa Provider | before 9.2.4.22 |
| Dell | Powermax Os | All versions Version 5978 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities