CVE-2022-45103: Infoleak
First published: Wed Jan 18 2023(Updated: )
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Solutions Enabler Virtual Appliance | <9.2.3.6 | |
| Dell EMC Unisphere for PowerMax | <9.2.3.22 | |
| Dell EMC Unisphere for PowerMax | >=10.0.0.0<10.0.0.5 | |
| Dell EMC Unisphere for PowerMax Virtual Appliance | <9.2.3.22 | |
| Dell EMC VASA Provider Virtual Appliance | <9.2.4.15 | |
| Dell Solutions Enabler | <9.2.3.6 | |
| Dell Solutions Enabler | >=10.0.0.0<10.0.0.5 | |
| Dell Unisphere 360 | <9.2.3.12 | |
| Dell Vasa Provider | <9.2.4.22 | |
| Dell Powermax Os | ||
| Dell Powermax Os | =5978 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp?
The vulnerability ID is CVE-2022-45103.
What is the severity of CVE-2022-45103?
The severity of CVE-2022-45103 is medium, with a severity value of 6.5.
What is the affected software for CVE-2022-45103?
The affected software for CVE-2022-45103 includes Dell EMC Solutions Enabler Virtual Appliance, Dell EMC Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell EMC VASA Provider Virtual Appliance, Dell Solutions Enabler, Dell Unisphere 360, Dell Vasa Provider, and Dell Powermax Os.
What is the description of CVE-2022-45103?
CVE-2022-45103 is an information disclosure vulnerability in Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x, which allows a low privileged remote attacker to read arbitrary files on the underlying file system.
How can I fix CVE-2022-45103?
To fix CVE-2022-45103, it is recommended to apply the security update provided by Dell. Refer to the Dell support website for more information.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell emc solutions enabler virtual appliance
- canonical/dell emc unisphere for powermax
- version/dell emc unisphere for powermax/10.0.0.0
- canonical/dell emc unisphere for powermax virtual appliance
- canonical/dell emc vasa provider virtual appliance
- canonical/dell solutions enabler
- version/dell solutions enabler/10.0.0.0
- canonical/dell unisphere 360
- canonical/dell vasa provider
- canonical/dell powermax os
- version/dell powermax os/5978