Skip to content
OpenAdvisories
High · 8.1 CVE-2022-22553 EUVD-2022-27699GHSA-mvx9-f55c-65h5

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploit…

Published Jan 21, 2022 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users.

Affected products

VendorProductAffectedFixed
Dell AppSync unspecified – < 4.4 4.4

References