CVE-2022-24414

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks.

• CWE-598
• CWE-200

• https://www.dell.com/support/kbdoc/en-us/000197425/dsa-2022-064-dell-emc-cloudlink-security-update-for-security-vulnerabilitiesPatch, Vendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000197425/dsa-2022-064-dell-emc-cloudlink-security-update-for-security-vulnerabilitiesPatch, Vendor Advisory

Published

May 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24409Dell BSAFE SSL-J contains remediation for a covert timing ch…7.5
• CVE-2022-2441The ImageMagick Engine plugin for WordPress is vulnerable to…8.8
• CVE-2022-24410 Dell BIOS contains an information exposure vulnerability. A…4.2
• CVE-2022-24411Dell PowerScale OneFS 8.2.2 and above contain an elevation o…7.8
• CVE-2022-24412Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an imprope…7.5
• CVE-2022-24413Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-…3.6
• CVE-2022-24415Dell BIOS contains an improper input validation vulnerabilit…7.8
• CVE-2022-24416Dell BIOS contains an improper input validation vulnerabilit…7.8
• CVE-2022-24417Dell BIOS contains an improper input validation vulnerabilit…6.7
• CVE-2022-24418Dell BIOS contains an improper input validation vulnerabilit…6.7
• CVE-2022-24419Dell BIOS contains an improper input validation vulnerabilit…7.8
• CVE-2022-2442The Migration, Backup, Staging – WPvivid plugin for WordPres…7.2