CVE-2022-34397

Published: Feb 13, 2023Modified: Jun 17, 2026

5.7

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.1 / Impact: 3.6

Source: NVD

Description

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

Affected (5)

Products: Dell: Evasa Provider Virtual Appliance, Solutions Enabler Virtual Appliance, Unisphere For Powermax Virtual Appliance

Dell

3 products

Evasa Provider Virtual Appliance

Solutions Enabler Virtual Appliance

Unisphere For Powermax Virtual Appliance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Dell Evasa Provider Virtual Appliance	Before 9.2.4.15
Dell Solutions Enabler Virtual Appliance	Before 9.2.3.6
Dell Solutions Enabler Virtual Appliance	Before 9.2.4.26
Dell Unisphere For Powermax Virtual Appliance	Before 9.2.3.22
Dell Unisphere For Powermax Virtual Appliance	Before 9.2.4.26

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities

Source: security_alert@emc.com

PatchVendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.