CVE-2022-45103

Description

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.

Affected (11)

Products: Dell: Emc Solutions Enabler Virtual Appliance, Emc Unisphere For Powermax, Emc Unisphere For Powermax Virtual Appliance, Emc Vasa Provider Virtual Appliance, Powermax Os, Solutions Enabler, Unisphere 360, Vasa Provider

Dell

8 products

Emc Solutions Enabler Virtual Appliance

Emc Unisphere For Powermax

Emc Unisphere For Powermax Virtual Appliance

Emc Vasa Provider Virtual Appliance

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Solutions Enabler Virtual Appliance	Before 9.2.3.6
Dell Emc Unisphere For Powermax	Before 9.2.3.22
Dell Emc Unisphere For Powermax	From 10.0.0.0 to 10.0.0.5
Dell Emc Unisphere For Powermax Virtual Appliance	Before 9.2.3.22
Dell Emc Vasa Provider Virtual Appliance	Before 9.2.4.15
Dell Powermax Os	All versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	Before 9.2.3.6
Dell Solutions Enabler	From 10.0.0.0 to 10.0.0.5
Dell Unisphere 360	Before 9.2.3.12
Dell Vasa Provider	Before 9.2.4.22

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities

Source: security_alert@emc.com

PatchVendor Advisory