DSA-2022-070: Dell EMC AppSync Security Update for a Path Traversal Vulnerability
Samenvatting: Dell EMC AppSync remediation is available for a path traversal vulnerability that may potentially be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24424 | Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24424 | Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application. | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Getroffen producten en herstel
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC AppSync | Versions 3.9.0.0 to 4.3.0.0 | 4.4.0.0 | https://dl.dell.com/downloads/DL107581 | |
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC AppSync | Versions 3.9.0.0 to 4.3.0.0 | 4.4.0.0 | https://dl.dell.com/downloads/DL107581 | |
Revisiegeschiedenis
| Revision | Date | Description |
| 1.0 | 2022-03-16 | Initial Release |
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
AppSync, AppSync, Product Security InformationArtikeleigenschappen
Artikelnummer: 000197433
Artikeltype: Dell Security Advisory
Laatst aangepast: 16 mrt. 2022
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.