CVE-2022-34397

State: Published
Severity: 6.9 Medium
Published: Feb 13, 2023
Updated: Mar 21, 2025
Reserved: Jun 23, 2022

Description

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.

Scores

CVSS	Score	Vector	Source
3.1	6.9 Medium	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N	dell

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
Unisphere for PowerMaxDell	before 10.0.0.5Affected

References

https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilitiesvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.