CVE-2022-45102: Medium severity dell data protection central vulnerability
Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Dell EMC Data Protection Central vulnerability?
The vulnerability ID for this Dell EMC Data Protection Central vulnerability is CVE-2022-45102.
What is the description of the Dell EMC Data Protection Central vulnerability?
The Dell EMC Data Protection Central vulnerability, CVE-2022-45102, is a Host Header Injection vulnerability that allows a remote unauthenticated attacker to inject arbitrary 'Host' header values to poison a web cache or trigger redirections.
Which versions of Dell EMC Data Protection Central are affected by this vulnerability?
Versions 19.1 through 19.7 of Dell EMC Data Protection Central are affected by this vulnerability.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by injecting arbitrary 'Host' header values to poison a web cache or trigger redirections.
Is there a security update available for this vulnerability?
Yes, a security update is available for this vulnerability. Please refer to the Dell EMC support website for more information.