Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:54
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system. |
30 Jan 2023, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Dell unisphere 360
Dell emc Vasa Provider Virtual Appliance Dell emc Unisphere For Powermax Virtual Appliance Dell emc Solutions Enabler Virtual Appliance Dell Dell solutions Enabler Dell powermax Os Dell vasa Provider Dell emc Unisphere For Powermax |
|
| References | (MISC) https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:dell:emc_unisphere_for_powermax:*:*:*:*:*:*:*:* cpe:2.3:o:dell:powermax_os:5978:*:*:*:*:*:*:* cpe:2.3:a:dell:unisphere_360:*:*:*:*:*:*:*:* cpe:2.3:o:dell:powermax_os:-:*:*:*:*:*:*:* cpe:2.3:a:dell:emc_solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:* cpe:2.3:a:dell:emc_vasa_provider_virtual_appliance:*:*:*:*:*:*:*:* cpe:2.3:a:dell:vasa_provider:*:*:*:*:standalone:*:*:* cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:* cpe:2.3:a:dell:emc_unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:* |
18 Jan 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-18 15:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-45103
Mitre link : CVE-2022-45103
CVE.ORG link : CVE-2022-45103
JSON object : View
Products Affected
dell
- solutions_enabler
- powermax_os
- emc_unisphere_for_powermax
- emc_vasa_provider_virtual_appliance
- vasa_provider
- unisphere_360
- emc_unisphere_for_powermax_virtual_appliance
- emc_solutions_enabler_virtual_appliance
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor