← Back to CVEs
CVE-2022-45103
MEDIUM6.5
Description
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.
CVE Details
CVSS v3.1 Score6.5
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published1/18/2023
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
dell:emc_solutions_enabler_virtual_appliancedell:emc_unisphere_for_powermaxdell:emc_unisphere_for_powermax_virtual_appliancedell:emc_vasa_provider_virtual_appliancedell:powermax_osdell:solutions_enablerdell:unisphere_360dell:vasa_provider
Weaknesses (CWE)
CWE-200CWE-200
References
https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.