CVE-2024-22229

Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker. An attacker could exploit this vulnerability to forge log entries, create false alarms, and inject malicious content into logs that compromise logs integrity. A malicious attacker could also prevent the product from logging information while malicious actions are performed or implicate an arbitrary user for malicious activities.

• CWE-117
• CWE-116

• https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilitiesVendor Advisory

Published

Jan 24, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22223 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22224 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22225 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22226 Dell Unity, versions prior to 5.4, contain a path traversal…6.5
• CVE-2024-22227 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-22228 Dell Unity, versions prior to 5.4, contains an OS Command I…7.8
• CVE-2024-2223An Incorrect Regular Expression vulnerability in Bitdefender…9.8
• CVE-2024-22230 Dell Unity, versions prior to 5.4, contains a Cross-site sc…5.4
• CVE-2024-22231Syndic cache directory creation is vulnerable to a directory…5
• CVE-2024-22232A specially crafted url can be created which leads to a dire…7.7
• CVE-2024-22233In Spring Framework versions 6.0.15 and 6.1.2, it is possibl…7.5
• CVE-2024-22234In Spring Security, versions 6.1.x prior to 6.1.7 and versio…7.4