DSA-2023-453: Security Update for Dell Cloud Tiering Appliance for Multiple Third-Party Component Vulnerabilities

Resumen: Dell Cloud Tiering Appliance remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artículo se aplica a: Este artículo no se aplica a: Este artículo no está vinculado a ningún producto específico. En este artículo no se identifican todas las versiones de los productos.
Consultar otros recursos

Impacto

High

Detalles

Third-party Component CVEs More Information
cups CVE-2023-4504, CVE-2023-34241, CVE-2023-32360 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
python3 CVE-2023-40217, CVE-2023-41105 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
tomcat CVE-2023-45648, CVE-2023-44487, CVE-2023-42795, CVE-2023-42794, CVE-2023-41080
 		 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
 
Third-party Component CVEs More Information
cups CVE-2023-4504, CVE-2023-34241, CVE-2023-32360 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
python3 CVE-2023-40217, CVE-2023-41105 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
tomcat CVE-2023-45648, CVE-2023-44487, CVE-2023-42795, CVE-2023-42794, CVE-2023-41080
 		 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
 
Dell Technologies recomienda que todos los clientes tengan en cuenta la puntuación base CVSS y las puntuaciones temporales o de entorno relevantes que puedan afectar a la posible gravedad asociada a una determinada vulnerabilidad de seguridad.

Productos afectados y corrección

Product Software/Firmware Affected Versions Updated Version Link
Cloud Tiering Appliance CTA and CTA-HA Versions prior to 13.1.0.2.35 Version 13.1.0.2.35
https://www.dell.com/support/home/product-support/product/cloud-tiering-appliance/drivers

 
Cloud Tiering Appliance CTA/VE and CTA-HA/VE Versions prior to 13.1.0.2.35 Version 13.1.0.2.35 https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers
Product Software/Firmware Affected Versions Updated Version Link
Cloud Tiering Appliance CTA and CTA-HA Versions prior to 13.1.0.2.35 Version 13.1.0.2.35
https://www.dell.com/support/home/product-support/product/cloud-tiering-appliance/drivers

 
Cloud Tiering Appliance CTA/VE and CTA-HA/VE Versions prior to 13.1.0.2.35 Version 13.1.0.2.35 https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers

Historial de revisiones

RevisionDateDescription
1.029-11-2023Initial Release

Información relacionada

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Aviso legal

Productos afectados

Cloud Tiering Appliance, Cloud Tiering Appliance Platform, Cloud Tiering Appliance/VE
Propiedades del artículo
Número de artículo: 000219978
Tipo de artículo: Dell Security Advisory
Última modificación: 19 sept 2025
Encuentra las respuestas que necesitas con la ayuda de otros usuarios de Dell
Servicios de asistencia
Comprueba si tu dispositivo está cubierto por los servicios de asistencia.