8.8
High
CVE-2022-34426 Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi…
Description
Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Container Storage Modules 2.0 | earliest → < 2.0.0 | 2.0.0 |
Other CVEs of Dell Container Storage Modules
The 4 CVEs of Dell Container Storage Modules →
CVE-2022-34427
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries
8.8
High
CVE-2022-34375
Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries
8.8
High
CVE-2022-34374
Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries
8.8
High