PT-2023-14606 · Dell · Vasa Provider Vapp+2
CVE-2022-45103
·
Publicado
2023-01-18
·
Atualizado
2023-01-30
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x
Description
The issue allows a low privileged remote attacker to potentially exploit an information disclosure vulnerability, leading to the ability to read arbitrary files on the underlying file system.
Recommendations
For version 9.2.3.x, update to a version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to sensitive files on the underlying file system until a patch is available.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dell Unisphere For Powermax Vapp
Solution Enabler Vapp
Vasa Provider Vapp