Authentication Bypass Vulnerability in Dell PowerProtect Cyber Recovery
CVE-2022-34372

9.8CRITICAL

Key Information:

Vendor
Dell
Status
Cyber Recovery
Vendor
CVE Published:
1 September 2022

Summary

An authentication bypass vulnerability exists in Dell PowerProtect Cyber Recovery prior to version 19.11.0.2. This issue allows remote unauthenticated attackers to exploit the docker registry API, potentially enabling them to access and manipulate docker images. The exploitation of this vulnerability could lead to a significant loss of integrity and confidentiality of sensitive data.

Affected Version(s)

Cyber Recovery < 19.11

References

https://www.dell.com/support/kbdoc/en-us/000201970/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.