DSA-2023-028: Dell PowerFlex Security Update for Apache Vulnerabilities

Summary: Dell PowerFlex remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Impact

Critical

Details

Third-party Component CVEs More Information
Apache Commons Text CVE-2022-42889 

See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Affected Versions Remediated Versions Link
PowerFlex Software Versions before 3.6.0.7 Version 3.6.0.7 https://www.dell.com/support/home/product-support/product/scaleio/drivers
Product Affected Versions Remediated Versions Link
PowerFlex Software Versions before 3.6.0.7 Version 3.6.0.7 https://www.dell.com/support/home/product-support/product/scaleio/drivers

Revision History

RevisionDateDescription
1.02023-01-30Initial Release
2.02023-02-03Revision to Title and More Information
3.02023-08-09Updated for enhanced presentation with no changes to content

Related Information

Affected Products

PowerFlex Software
Article Properties
Article Number: 000208003
Article Type: Dell Security Advisory
Last Modified: 09 Aug 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.