DSA-2023-453: Security Update for Dell Cloud Tiering Appliance for Multiple Third-Party Component Vulnerabilities

Riepilogo: Dell Cloud Tiering Appliance remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Impatto

High

Dettagli

Third-party Component CVEs More Information
cups CVE-2023-4504, CVE-2023-34241, CVE-2023-32360 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
python3 CVE-2023-40217, CVE-2023-41105 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
tomcat CVE-2023-45648, CVE-2023-44487, CVE-2023-42795, CVE-2023-42794, CVE-2023-41080
 
See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
 
Third-party Component CVEs More Information
cups CVE-2023-4504, CVE-2023-34241, CVE-2023-32360 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
python3 CVE-2023-40217, CVE-2023-41105 See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
tomcat CVE-2023-45648, CVE-2023-44487, CVE-2023-42795, CVE-2023-42794, CVE-2023-41080
 
See SUSE link for individual scores for each CVE https://www.suse.com/security/cve/ This hyperlink is taking you to a website outside of Dell Technologies.
 
Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Product Software/Firmware Affected Versions Updated Version Link
Cloud Tiering Appliance CTA and CTA-HA Versions prior to 13.1.0.2.35 Version 13.1.0.2.35
https://www.dell.com/support/home/product-support/product/cloud-tiering-appliance/drivers

 
Cloud Tiering Appliance CTA/VE and CTA-HA/VE Versions prior to 13.1.0.2.35 Version 13.1.0.2.35 https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers
Product Software/Firmware Affected Versions Updated Version Link
Cloud Tiering Appliance CTA and CTA-HA Versions prior to 13.1.0.2.35 Version 13.1.0.2.35
https://www.dell.com/support/home/product-support/product/cloud-tiering-appliance/drivers

 
Cloud Tiering Appliance CTA/VE and CTA-HA/VE Versions prior to 13.1.0.2.35 Version 13.1.0.2.35 https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers

Cronologia delle revisioni

RevisionDateDescription
1.029-11-2023Initial Release

Informazioni correlate

Prodotti interessati

Cloud Tiering Appliance, Cloud Tiering Appliance Platform, Cloud Tiering Appliance/VE
Proprietà dell'articolo
Numero articolo: 000219978
Tipo di articolo: Dell Security Advisory
Ultima modifica: 19 set 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.