HIGH🇬🇧 English

CVE-2022-34448

CVSS 8.8v3.1pub. 2023-02-11upd. 2024-11-21

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability. An unauthenticated non-privileged user could potentially exploit the issue and perform any privileged state-changing actions.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Dell Powerpath Management Appliance

    APP
    Dell
    3.03.13.23.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-34446HIGH8.8ten sam produkt

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authe...

CVE-2022-34447HIGH7.2ten sam produkt

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerabili...

CVE-2021-43587HIGH8.2ten sam produkt

Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic ke...

CVE-2022-34449MEDIUM6.0ten sam produkt

PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability...

CVE-2022-34450MEDIUM6.7ten sam produkt

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated...