CVE-2022-45103

Description

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.

Affected (11)

Products: Dell: Emc Solutions Enabler Virtual Appliance, Emc Unisphere For Powermax, Emc Unisphere For Powermax Virtual Appliance, Emc Vasa Provider Virtual Appliance, Powermax Os, Solutions Enabler, Unisphere 360, Vasa Provider

Dell

8 products

Emc Solutions Enabler Virtual Appliance

Emc Unisphere For Powermax

Emc Unisphere For Powermax Virtual Appliance

Emc Vasa Provider Virtual Appliance

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Solutions Enabler Virtual Appliance	version < 9.2.3.6
Dell Emc Unisphere For Powermax	version < 9.2.3.22
Dell Emc Unisphere For Powermax	10.0.0.0 ≤ version < 10.0.0.5
Dell Emc Unisphere For Powermax Virtual Appliance	version < 9.2.3.22
Dell Emc Vasa Provider Virtual Appliance	version < 9.2.4.15
Dell Powermax Os	All versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	version < 9.2.3.6
Dell Solutions Enabler	10.0.0.0 ≤ version < 10.0.0.5
Dell Unisphere 360	version < 9.2.3.12
Dell Vasa Provider	version < 9.2.4.22

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities

Source: security_alert@emc.com

PatchVendor Advisory