CVE-2022-34446 HIGH

CVE-2022-34446

Vendor Dell
Product PowerPath Management Appliance
Weakness CWE-285
Published February 10, 2023
Last update March 26, 2025

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g., of role Monitoring) can exploit this issue and gain access to sensitive information, and modify the configuration.

Key dates

02Disclosure timeline

February 10, 2023 CVE published
March 26, 2025 Record updated