← Back

CVE-2022-31233

nvd nist
Published: Aug 31, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD

Description

Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.

Affected (8)

Dell
8 products
Evasa Provider Virtual Appliance
Powermax Os
Solutions Enabler
Solutions Enabler Virtual Appliance
Unisphere 360
Unisphere For Powermax
Unisphere For Powermax Virtual Appliance
Vasa
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Evasa Provider Virtual Appliance
Before 9.2.3.7
Powermax Os
Version 5978
Solutions Enabler
Before 9.2.3.4
Solutions Enabler Virtual Appliance
Before 9.2.3.4
Unisphere 360
Before 9.2.3.6
Unisphere For Powermax
Before 9.2.3.15
Unisphere For Powermax Virtual Appliance
Before 9.2.3.15
Vasa
Before 9.2.3.15

Related CWEs

CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
CWE-669
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

Source: security_alert@emc.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.