9.8
Critical
CVE-2022-34372 Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability
Description
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cyber Recovery 19.11 | earliest → < 19.11 | 19.11 |
Other CVEs of Cyber Recovery
The 6 CVEs of Cyber Recovery →
CVE-2026-79938
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability
7.6
High
CVE-2026-79939
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following…
5.8
Medium
CVE-2026-49809
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used…
6.5
Medium
CVE-2022-32481
Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual…
7.8
High