VULNERABILITY INTELLIGENCE
CVE-2022-34397
CVSS score6.9 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2023-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N
Description
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.
Weakness classification
- CWE-863: Incorrect Authorization
Primary references
- security_alert@emc.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory