DSA-2022-103: Dell EMC NetWorker Security Update for Multiple Vulnerabilities
Samenvatting: Dell EMC NetWorker remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system. Only NetWorker Management Console Server and NetWorker Server components are impacted by these vulnerabilities. ...
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
Critical
Gegevens
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-29082 | Dell EMC NetWorker versions 19.1.x, 19.2.x, 19.3.x, 19.4.x, 19.5.x, 19.6, 19.6.0.1, 19.6.0.2, and 19.6.1 contain an Improper Validation of Certificate with Host Mismatch vulnerability in RabbitMQ port 5671 which may allow remote attackers to spoof certificates. | 3.7 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N |
| Third-Party Component | CVE | More Information |
| Apache HTTP | CVE-2022-22720 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-29082 | Dell EMC NetWorker versions 19.1.x, 19.2.x, 19.3.x, 19.4.x, 19.5.x, 19.6, 19.6.0.1, 19.6.0.2, and 19.6.1 contain an Improper Validation of Certificate with Host Mismatch vulnerability in RabbitMQ port 5671 which may allow remote attackers to spoof certificates. | 3.7 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N |
| Third-Party Component | CVE | More Information |
| Apache HTTP | CVE-2022-22720 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
Getroffen producten en herstel
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell EMC NetWorker | 19.1.x | 19.6.0.3, 19.5.0.7 |
https://www.dell.com/support/home/en-in/product-support/product/networker/drivers |
| 19.2.x | |||
| 19.3.x | |||
| 19.4.x | |||
| 19.5.x | |||
| 19.6 | |||
| 19.6.0.1 | |||
| 19.6.0.2 | |||
| 19.6.1 |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell EMC NetWorker | 19.1.x | 19.6.0.3, 19.5.0.7 |
https://www.dell.com/support/home/en-in/product-support/product/networker/drivers |
| 19.2.x | |||
| 19.3.x | |||
| 19.4.x | |||
| 19.5.x | |||
| 19.6 | |||
| 19.6.0.1 | |||
| 19.6.0.2 | |||
| 19.6.1 |
Revisiegeschiedenis
| Revision | Date | Description |
| 1.0 | 2022-04-22 | Initial Release |
| 2.0 | 2022-05-31 | Added 19.5.0.7 as an Updated Version |
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
NetWorker Family, NetWorker, Product Security InformationArtikeleigenschappen
Artikelnummer: 000198987
Artikeltype: Dell Security Advisory
Laatst aangepast: 31 mei 2022
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.