Auth Bypass in Dell Unisphere PowerMax vApp 10.0.0.5
CVE-2022-34397 Published on February 13, 2023

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2022-34397 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2022-34397

Want to know whenever a new CVE is published for Dell products? stack.watch will email you.

Dell Solutions Enabler Virtual Appliance
 
Dell Evasa Provider Virtual Appliance
 
Dell Unisphere Powermax Virtual Appliance
 

Affected Versions

Dell Unisphere for PowerMax:

Exploit Probability

EPSS
0.07%
Percentile
20.11%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.