Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-34372 EUVD-2022-37327GHSA-4vx6-fgh9-hr42

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacke…

Published Sep 1, 2022 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality

Affected products

VendorProductAffectedFixed
Dell Cyber Recovery unspecified – < 19.11 19.11

References