DSA-2022-064: Dell EMC CloudLink Security Update for Security Vulnerabilities
Summary: Dell EMC CloudLink remediation is available for security vulnerabilities that may potentially be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24414 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24414 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Affected Products & Remediation
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC CloudLink | Versions before 7.1.3 | 7.1.3 | https://www.dell.com/support/home/en-us/product-support/product/cloudlink-securevm/drivers | |
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC CloudLink | Versions before 7.1.3 | 7.1.3 | https://www.dell.com/support/home/en-us/product-support/product/cloudlink-securevm/drivers | |
Revision History
| Revision | Date | Description |
| 1.0 | 2022-03-16 | Initial Release |
Related Information
Legal Disclaimer
Affected Products
CloudLinkProducts
Product Security InformationArticle Properties
Article Number: 000197425
Article Type: Dell Security Advisory
Last Modified: 18 Sep 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.