CVE-2022-45103 MEDIUM

CVE-2022-45103

Vendor Dell
Product Unisphere for PowerMax vApp
Weakness CWE-200 · Info exposure
Published January 18, 2023
Last update April 3, 2025

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system.

Key dates

02Disclosure timeline

January 18, 2023 CVE published
April 3, 2025 Record updated