DSA-2023-299: Security Update for Dell ESI (Enterprise Storage Integrator) for SAP LAMA multiple security vulnerabilities.
Podsumowanie: Dell ESI (Enterprise Storage Integrator) for SAP LAMA remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system. ...
Ten artykuł dotyczy
Ten artykuł nie dotyczy
Ten artykuł nie jest powiązany z żadnym konkretnym produktem.
Nie wszystkie wersje produktu zostały zidentyfikowane w tym artykule.
Skutki
Critical
Szczegóły
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-39245 |
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials. | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVE-2023-39244 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an improper access control vulnerability in EHAC component. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unrestricted access to the SOAP APIs. | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-39245 |
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials. | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVE-2023-39244 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an improper access control vulnerability in EHAC component. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unrestricted access to the SOAP APIs. | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Produkty, których dotyczy problem, i środki zaradcze
| CVEs Address | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-39244, CVE-2023-39245 | ESI (Enterprise Storage Integrator) for SAP LAMA | Versions prior to V10.0.0.0 | V11.0.0.1 | https://www.dell.com/support/home/en-us/product-support/product/storage-integrator-for-sap-landscape-virtualization-management-/drivers |
| CVEs Address | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-39244, CVE-2023-39245 | ESI (Enterprise Storage Integrator) for SAP LAMA | Versions prior to V10.0.0.0 | V11.0.0.1 | https://www.dell.com/support/home/en-us/product-support/product/storage-integrator-for-sap-landscape-virtualization-management-/drivers |
Obejścia problemu i środki zaradcze
none
Historia zmian
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-07-27 | Initial Release |
Powiązane informacje
Zastrzeżenie prawne
Produkty, których dotyczy problem
Enterprise Storage Integrator for SAP Landscape ManagementWłaściwości artykułu
Numer artykułu: 000216654
Typ artykułu: Dell Security Advisory
Ostatnia modyfikacja: 10 sie 2023
Znajdź odpowiedzi na swoje pytania u innych użytkowników produktów Dell
Usługi pomocy technicznej
Sprawdź, czy Twoje urządzenie jest objęte usługą pomocy technicznej.