Dell Storage Manager False Positive Security Vulnerability
摘要: This article provides a list of security vulnerabilities that cannot be exploited on Storage Center Dell Storage Manager, but which may be identified by security scanners.
本文章適用於
本文章不適用於
本文無關於任何特定產品。
本文未識別所有產品版本。
安全性文章類型
Security KB
CVE 識別碼
| The CVE IDs are listed in the table below. |
問題摘要
Security scans may identify DSM 20.1.2 as potentially vulnerable to the above mentioned exposure due to the Apache Log4j library version 2.17.0 being present.
See the 'Recommendation' section below for details on each CVE.
建議
The vulnerabilities listed in the table above are in order by the date on which Storage Center Engineering determined that Dell Storage Manager version 20.1.2 was not vulnerable.
| Third-party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| Apache Log4j v2.17.0 | CVE-2021-44832 | Potential remote code execution attack when code is using JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. | DSM does not use the JDBC Appender functionality | January 4, 2022 |
法律免責聲明
受影響的產品
Dell Storage Manager, Dell Storage Manager, OEM Dell Storage Manager, Product Security Information文章屬性
文章編號: 000195870
文章類型: Security KB
上次修改時間: 18 9月 2025
版本: 3
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。