CVE-2022-34372

Katalog CVE

CVSS 9.1 · Critical EPSS 1,2%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada dell powerprotect cyber recovery. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality

Rincian

Terbit di NVD

1 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-287: Improper Authentication

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-us/000201970/dsa-2022-196-dell-emc-cyber-recovery-security-update-for-mu... patch · advisory vendor