DSA-2022-348: Dell Data Protection Central Security Update for Proprietary Code Vulnerability

Resumo: Dell Data Protection Central remediation is available for Host Header Injection vulnerability that may be exploited by malicious users to compromise the affected system.

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.
Confira outros recursos

Impacto

Medium

Dados

Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2022-45102 Dell Data Protection Central versions 19.1 through 19.7 contain a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary 'Host' header values to poison a web cache or trigger redirections.  5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2022-45102 Dell Data Protection Central versions 19.1 through 19.7 contain a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary 'Host' header values to poison a web cache or trigger redirections.  5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

Product Affected Versions Updated Versions Link to Update
Dell Data Protection Central 19.1 19.8 To upgrade your Dell Data Protection Central system, see Dell KB article 34881: Data Protection Central: How to Install the Data Protection Central operating system Update for installation instructions.

See the latest 'Data Protection Central OS Update' file in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/drivers.

See the latest 'Data Protection Central OS Updates Release Notes' in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/docs.
19.2 19.8
19.3 19.8
19.4 19.8
19.5 19.8
19.6 19.8
19.7 19.8
PowerProtect DP Series Appliance (Integration Data Protection Appliance) 2.5 2.7.x To upgrade your PowerProtect DP Series Appliance Dell Data Protection Central component, see Dell KB article 34881: Data Protection Central: How to Install the Data Protection Central operating system Update for installation instructions.

See the latest 'Data Protection Central OS Update' file in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/drivers.

See the latest 'Data Protection Central OS Updates Release Notes' in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/docs.
2.6.x 2.7.x
2.7.x 2.7.x
 
 
NOTE: For PowerProtect DP Series Appliance (Integration Data Protection Appliance), the appliance should first be upgraded to any 2.7.x version (version 2.7.2 is preferred) and then the previously mentioned Data Protection Central patch should be applied.
Product Affected Versions Updated Versions Link to Update
Dell Data Protection Central 19.1 19.8 To upgrade your Dell Data Protection Central system, see Dell KB article 34881: Data Protection Central: How to Install the Data Protection Central operating system Update for installation instructions.

See the latest 'Data Protection Central OS Update' file in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/drivers.

See the latest 'Data Protection Central OS Updates Release Notes' in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/docs.
19.2 19.8
19.3 19.8
19.4 19.8
19.5 19.8
19.6 19.8
19.7 19.8
PowerProtect DP Series Appliance (Integration Data Protection Appliance) 2.5 2.7.x To upgrade your PowerProtect DP Series Appliance Dell Data Protection Central component, see Dell KB article 34881: Data Protection Central: How to Install the Data Protection Central operating system Update for installation instructions.

See the latest 'Data Protection Central OS Update' file in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/drivers.

See the latest 'Data Protection Central OS Updates Release Notes' in https://www.dell.com/support/home/en-us/product-support/product/data-protection-central/docs.
2.6.x 2.7.x
2.7.x 2.7.x
 
 
NOTE: For PowerProtect DP Series Appliance (Integration Data Protection Appliance), the appliance should first be upgraded to any 2.7.x version (version 2.7.2 is preferred) and then the previously mentioned Data Protection Central patch should be applied.

Histórico de revisão

RevisionDateDescription
1.02022-12-15Initial Release

Informações relacionadas

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Aviso de isenção legal

Produtos afetados

PowerProtect Data Protection Appliance, Data Protection Central, PowerProtect Data Protection Software

Produtos

Product Security Information
Propriedades do artigo
Número do artigo: 000206329
Tipo de artigo: Dell Security Advisory
Último modificado: 19 set. 2025
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.