CVE-2022-34397
Last modified
CVE-2022-34397 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized. . EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.
Metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Evasa Provider Virtual Appliance | < 9.2.4.15 |
| Dell | Solutions Enabler Virtual Appliance | < 9.2.3.6 |
| Dell | Solutions Enabler Virtual Appliance | < 9.2.4.26 |
| Dell | Unisphere For Powermax Virtual Appliance | < 9.2.3.22 |
| Dell | Unisphere For Powermax Virtual Appliance | < 9.2.4.26 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-34397?
How severe is CVE-2022-34397?
How do I fix CVE-2022-34397?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-34391Dell Client BIOS Versions prior to the remediated version co…7.8
- CVE-2022-34392 SupportAssist for Home PCs (versions 3.11.4 and prior) cont…5.5
- CVE-2022-34393 Dell BIOS contains an improper input validation vulnerabili…7.5
- CVE-2022-34394Dell OS10, version 10.5.3.4, contains an Improper Certificat…3.7
- CVE-2022-34395Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2022-34396 Dell OpenManage Server Administrator (OMSA) version 10.3.0.…7.8
- CVE-2022-34398 Dell BIOS contains a Time-of-check Time-of-use vulnerabilit…7
- CVE-2022-34399 Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a…2.3
- CVE-2022-3440The Rock Convert WordPress plugin before 2.11.0 does not san…6.1
- CVE-2022-34400 Dell BIOS contains a heap buffer overflow vulnerability. A …7.1
- CVE-2022-34401 Dell BIOS contains a stack based buffer overflow vulnerabil…7.5
- CVE-2022-34402Dell Wyse ThinOS 2205 contains a Regular Expression Denial o…4.9
Are you affected by CVE-2022-34397?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST