PT-2022-21337 · Dell · Dell Powerprotect Cyber Recovery
CVE-2022-32481
·
Published
2022-07-07
·
Updated
2023-08-08
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Dell PowerProtect Cyber Recovery versions prior to 19.11
Description
The issue allows a lower-privileged authenticated user to escalate privileges to root, leading to complete system takeover by chaining docker commands on virtual appliance deployments.
Recommendations
For versions prior to 19.11, update to version 19.11 or later to resolve the issue. As a temporary workaround, consider restricting access to docker commands for lower-privileged users until a patch is applied.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dell Powerprotect Cyber Recovery