DSA-2022-196: Dell Cyber Recovery Security Update for Multiple Vulnerabilities
Сводка: Dell Cyber Recovery remediation is available for multiple security vulnerabilities that may potentially be exploited by malicious users to compromise the affected system.
Данная статья применяется к
Данная статья не применяется к
Эта статья не привязана к какому-либо конкретному продукту.
В этой статье указаны не все версии продуктов.
Влияние
Critical
Подробные сведения
| Proprietary Code CVE | Description | CVSS Base score | CVSS Vector String |
| CVE-2022-34372 | Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Third-party Component | CVEs | More information |
| Debian GNU/Linux, Alpine Linux | See Release Notes | See NVD (http://nvd.nist.gov/  ) for individual scores for each CVE. |
| Proprietary Code CVE | Description | CVSS Base score | CVSS Vector String |
| CVE-2022-34372 | Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Third-party Component | CVEs | More information |
| Debian GNU/Linux, Alpine Linux | See Release Notes | See NVD (http://nvd.nist.gov/ ) for individual scores for each CVE. |
Затронутые продукты и исправление
| Product | Affected Versions | Updated Versions | Link to update |
| Cyber Recovery | Versions before 19.11.0.2 | 19.11.0.2 | Cyber Recovery Downloads |
NOTE: Third-party vulnerabilities pertain to Golang packages and Cyber Recovery Docker containers. The proprietary vulnerability pertains to Cyber Recovery software on management host.
| Product | Affected Versions | Updated Versions | Link to update |
| Cyber Recovery | Versions before 19.11.0.2 | 19.11.0.2 | Cyber Recovery Downloads |
NOTE: Third-party vulnerabilities pertain to Golang packages and Cyber Recovery Docker containers. The proprietary vulnerability pertains to Cyber Recovery software on management host.
История изменений
| Revision | Date | Description |
| 1.0 | 2022-08-01 | Initial Release |
Связанная информация
Правовая оговорка
Затронутые продукты
PowerProtect Cyber RecoveryПродукты
Product Security InformationСвойства статьи
Номер статьи: 000201970
Тип статьи: Dell Security Advisory
Последнее изменение: 19 Sep 2025
Получите ответы на свои вопросы от других пользователей Dell
Услуги технической поддержки
Проверьте, распространяются ли на ваше устройство услуги технической поддержки.