CVE-2023-48661

Description

Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary files from the target system.

Affected (3)

Products: Dell: Powermax Os, Solutions Enabler Virtual Appliance, Unisphere For Powermax Virtual Appliance

Dell

3 products

Powermax Os

Solutions Enabler Virtual Appliance

Unisphere For Powermax Virtual Appliance

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler Virtual Appliance	Before 9.2.4.5
Dell Unisphere For Powermax Virtual Appliance	Before 9.2.4.7

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://www.dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities

Source: security_alert@emc.com

PatchVendor Advisory