Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-45103


Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.


Published

2023-01-18T15:15:11.313

Last Modified

2024-11-21T07:28:47.307

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    CWE-200

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell emc_solutions_enabler_virtual_appliance < 9.2.3.6 Yes
Application dell emc_unisphere_for_powermax < 9.2.3.22 Yes
Application dell emc_unisphere_for_powermax < 10.0.0.5 Yes
Application dell emc_unisphere_for_powermax_virtual_appliance < 9.2.3.22 Yes
Application dell emc_vasa_provider_virtual_appliance < 9.2.4.15 Yes
Application dell solutions_enabler < 9.2.3.6 Yes
Application dell solutions_enabler < 10.0.0.5 Yes
Application dell unisphere_360 < 9.2.3.12 Yes
Application dell vasa_provider < 9.2.4.22 Yes
Operating System dell powermax_os - Yes
Operating System dell powermax_os 5978 Yes

References