CVE-2022-34397
Assigner: dell
Published: 2023-02-13T09:06:03.573Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Unisphere for PowerMax
vendor: Dell
versions: lessThan: 10.0.0.5
status: affected
version: 0
versionType: custom
datePublic: 2023-01-04T06:30:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.</span>


value: 
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-863
description: CWE-863: Incorrect Authorization
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev