CVE-2023-48660

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-48660
Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:powermax_os:5978:*:*:*:eem:*:*:*
History

19 Dec 2023, 02:50

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000220427/dsa-2023-443-dell-powermaxos-5978-dell-unisphere-360-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-virtual-appliance-and-dell-powermax-eem-security-update-for-multiple-vulnerabilities - Patch, Vendor Advisory
Summary
  • (es) Dell vApp Manager, las versiones anteriores a 9.2.4.x contienen una vulnerabilidad de lectura de archivos arbitraria. Un atacante remoto podría explotar esta vulnerabilidad para leer archivos arbitrarios del sistema de destino.
First Time Dell solutions Enabler Virtual Appliance
Dell powermax Os
Dell
Dell unisphere For Powermax Virtual Appliance
CPE cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:powermax_os:5978:*:*:*:eem:*:*:*
cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*

14 Dec 2023, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-14 16:15

Updated : 2023-12-19 02:50

NVD link : CVE-2023-48660

Mitre link : CVE-2023-48660

CVE.ORG link : CVE-2023-48660

JSON object : View

Products Affected

dell

  • solutions_enabler_virtual_appliance
  • unisphere_for_powermax_virtual_appliance
  • powermax_os
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')