Skip to content
OpenAdvisories
High · 8.3 CVE-2022-22551 EUVD-2022-27697GHSA-x6f9-ggpf-g22c

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could poten…

Published Jan 21, 2022 · Updated Sep 16, 2024 · Assigned by dell

Vendor: Dell Product: AppSync

Description

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.

Affected products

VendorProductAffectedFixed
Dell AppSync unspecified – < 4.4 4.4

References