PT-2022-16682
CVE-2022-24414
·
تاريخ النشر
2022-05-26
·
تاريخ التحديث
2022-06-07
الوصف من
CVSS 3.1
7.6
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Dell EMC CloudLink versions 7.1.3 and earlier
Description
The issue concerns the exposure of Auth Tokens in GET requests, which can be logged in reverse proxies and server logs. Attackers may potentially use these tokens to access the CloudLink server. It is recommended that tokens should not be used in request URLs to avoid such attacks.
Recommendations
For Dell EMC CloudLink versions 7.1.3 and earlier, avoid using Auth Tokens in the request URL to prevent potential access by attackers.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾