CVE-2022-24414

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions 7.1.3 and earlier

Description The issue concerns the exposure of Auth Tokens in GET requests, which can be logged in reverse proxies and server logs. Attackers may potentially use these tokens to access the CloudLink server. It is recommended that tokens should not be used in request URLs to avoid such attacks.

Recommendations For Dell EMC CloudLink versions 7.1.3 and earlier, avoid using Auth Tokens in the request URL to prevent potential access by attackers.