VULNERABILITY INTELLIGENCE

CVE-2022-24414

CVSS score7.6 HIGH
EPSS probability0.65%
CISA KEVNot currently listed
Published2022-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Description

Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks.

Weakness classification

  • security_alert@emc.com: CWE-598
  • nvd@nist.gov: CWE-200

Primary references