Headline
CVE-2022-33936: DSA-2022-182: Cloud Mobility for Dell EMC Storage Security Update for a Path Traversal/RCE Vulnerability
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity.
Vaikutus
High
Tiedot
Cloud Mobility for Dell EMC Storage, 1.3.0 contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a high severity issue; so Dell recommends customers to upgrade at the earliest opportunity.
Cloud Mobility for Dell EMC Storage, 1.3.0 contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a high severity issue; so Dell recommends customers to upgrade at the earliest opportunity.
Dell Technologies suosittelee, että kaikki asiakkaat ottavat huomioon sekä CVSS-peruspistemäärän että kaikki asiaankuuluvat väliaikaiset ja ympäristöön liittyvät pisteet, jotka voivat vaikuttaa tietyn tietoturvahaavoittuvuuden mahdolliseen vakavuuteen.
Tuotteet, joihin asia vaikuttaa ja tilanteen korjaaminen****Keinoja ongelman kiertämiseen tai lieventämiseen
We now reject any patterns in the restore tar file that start with an absolute path or contain … anywhere in the file path.
Versiohistoria
Revision
Date
Description
1.0
2022-07-06
Initial release
Asiaan liittyvät tiedot
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide
Cloud Mobility, Cloud Mobility for Dell EMC Storage, Product Security Information
06 heinäk. 2022