DSA-2022-064: Dell EMC CloudLink Security Update for Security Vulnerabilities
摘要: Dell EMC CloudLink remediation is available for security vulnerabilities that may potentially be exploited by malicious users to compromise the affected system.
本文章適用於
本文章不適用於
本文無關於任何特定產品。
本文未識別所有產品版本。
影響
High
詳細資料
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24414 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-24414 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use these tokens to access CloudLink server. Tokens should not be used in request URL to avoid such attacks. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
受影響的產品與補救措施
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC CloudLink | Versions before 7.1.3 | 7.1.3 | https://www.dell.com/support/home/en-us/product-support/product/cloudlink-securevm/drivers | |
| Product | Affected Versions | Updated Versions | Link to Update | |
| Dell EMC CloudLink | Versions before 7.1.3 | 7.1.3 | https://www.dell.com/support/home/en-us/product-support/product/cloudlink-securevm/drivers | |
修訂歷史記錄
| Revision | Date | Description |
| 1.0 | 2022-03-16 | Initial Release |
相關資訊
法律免責聲明
受影響的產品
CloudLink產品
Product Security Information文章屬性
文章編號: 000197425
文章類型: Dell Security Advisory
上次修改時間: 18 9月 2025
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。